The vulnerability CVE-2026-5609 affects Tenda i12 firmware version 1.0.0.11(3862). It is a stack-based buffer overflow in the formwrlSSIDset function of the /goform/wifiSSIDset parameter handler. The issue arises from improper handling of the index/wl_radio argument, allowing an attacker to remotely trigger a buffer overflow condition. This could potentially lead to arbitrary code execution or denial of service. The CVSS 4.0 score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No official patch or remediation level has been disclosed by the vendor.

Successful exploitation of this vulnerability could allow a remote attacker to cause a stack-based buffer overflow on the affected device, potentially leading to arbitrary code execution or denial of service. The vulnerability impacts confidentiality, integrity, and availability of the device. No confirmed exploitation in the wild has been reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting network access to the affected device's management interface to trusted sources only. Monitor vendor channels for updates and apply patches promptly once available.