CVE-2025-65804

Medium · 6.5

CVSS

6.5

EPSS

0.5%

Published

Dec 8, 2025

CISA due date

—

The record

Tenda AX3 v16.03.12.11 contains a stack overflow in formSetIptv via the iptvType parameter, which can cause memory corruption and enable remote code execution (RCE).

Affected packages

Ecosystem	Package	Introduced	Fixed