Threat database

A vulnerability was detected in Tenda JD12L 16.03.53.23. The affected element is the function fromSetWifiGusetBasic of the file /goform/WifiGuestSet. Performing a manipulation of the argument shareSpeed results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.

A security vulnerability has been detected in Tenda JD12L 16.03.53.23. Impacted is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. Such manipulation of the argument startIp leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

A weakness has been identified in Tenda F451 1.0.0.7/1.0.0.9. The affected element is the function fromNatlimit of the file /goform/Natlimit of the component Web Management Interface. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

CVE-2026-11556 is a high-severity OS command injection vulnerability in the Tenda F451 router's Web Management Interface. It affects versions 1.0.0.7 and 1.0.0.9, specifically the formWriteFacMac function in the /goform/WriteFacMac component. The vulnerability allows remote attackers to manipulate the mac argument to execute arbitrary OS commands. Exploit code has been publicly released, increasing the risk of attacks. No official patch or remediation guidance is currently available from the vendor.

A vulnerability was found in Tenda HG7, HG9 and HG10 300001138_en_xpon. This affects the function formPPPEdit of the file /boaform/formPPPEdit. The manipulation of the argument encodename results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.

CVE-2026-11528 is a high-severity stack-based buffer overflow vulnerability in the Tenda AC18 router firmware version 15.03.05.05. It exists in the Web Management Interface component, specifically in the function sub_45304 of the /goform/getRebootStatus endpoint. The vulnerability is triggered by manipulating the callback argument remotely, potentially allowing an attacker to execute arbitrary code or cause a denial of service.

CVE-2026-11524 is a high-severity stack-based buffer overflow vulnerability in the Tenda W20E router, specifically in version 15.11.0.6. The flaw exists in the Web Management Interface's modifyWifiFilterRules function, where improper handling of the wifiFilterListRemark argument can lead to memory corruption. This vulnerability can be exploited remotely without user interaction and requires low privileges. No official patch or remediation guidance has been provided yet.

A flaw has been found in Tenda W20E 15.11.0.6. This issue affects the function formPortalAuth of the file /goform/PortalAuth of the component Web Management Interface. Executing a manipulation of the argument gotoUrl can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.

A vulnerability was detected in Tenda W20E 15.11.0.6. This vulnerability affects the function formSetPortMirror of the file /goform/setPortMirror. Performing a manipulation of the argument portMirrorMirroredPorts results in stack-based buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.

A vulnerability was detected in Tenda CX12L 16.03.53.12. The impacted element is the function setSchedWifi of the file /goform/openSchedWifi of the component Wi-Fi Schedule Configuration Endpoint. Performing a manipulation of the argument schedStartTime/schedEndTime results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.

A security vulnerability has been detected in Tenda CX12L 16.03.53.12. The affected element is the function form_fast_setting_wifi_set of the file /goform/fast_setting_wifi_set of the component Wi-Fi Configuration Endpoint. Such manipulation of the argument ssid leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

A vulnerability was determined in Tenda HG7, HG9 and HG10 300001138_en_xpon. This affects the function formDOMAINBLK of the file /boaform/formDOMAINBLK. Executing a manipulation of the argument blkDomain can lead to stack-based buffer overflow. The attack may be performed from remote.

A vulnerability was found in Tenda HG7, HG9 and HG10 300001138_en_xpon. Affected by this issue is the function asp_voip_OtherSet of the file /boaform/voip_other_set of the component Web Management Interface. Performing a manipulation of the argument funckey_transfer results in stack-based buffer overflow. The attack is possible to be carried out remotely.

A weakness in the Tenda AC15 router version 15.03.05.19 involves weak password requirements related to an unknown function in the Samba configuration file /etc_ro/smb.conf. This vulnerability can only be exploited from within the local network and requires a high level of attack complexity. The exploit is publicly available but is considered difficult to execute. The CVSS score is low, reflecting limited impact and exploitability.

CVE-2026-10192 is a high-severity stack-based buffer overflow vulnerability in the Tenda W12 router firmware version 3.0.0.7(4763). The flaw exists in the set_local_time_0 function within the /bin/httpd component and can be triggered remotely by manipulating the Time argument. Exploitation could lead to severe consequences due to the high impact on confidentiality, integrity, and availability. Although an exploit is publicly available, there are no confirmed reports of active exploitation in the wild. No official patch or remediation guidance has been provided by the vendor as of the publication date.

CVE-2026-10191 is a high-severity stack-based buffer overflow vulnerability in the Tenda W12 router firmware version 3.0.0.7(4763). The flaw exists in the cgiWifiMacFilterSet function within the /bin/httpd component, where improper handling of the wifiMacFilterSet.macList.mac argument allows remote attackers to trigger a buffer overflow. This vulnerability can be exploited remotely without user interaction and has been publicly disclosed. No official patch or remediation guidance is currently available from the vendor. The vulnerability has not been observed exploited in the wild to date.

CVE-2026-10190 is a high-severity denial of service vulnerability affecting the Tenda W12 router version 3.0.0.7(4763). The flaw exists in the Web Management Interface, specifically in the cgiSysWebTimeoutSet function of the /bin/httpd component. By manipulating the web_over_time argument remotely, an attacker can cause the device to become unavailable. Although an exploit is publicly known, there is no confirmed patch or official remediation available at this time.

CVE-2026-10189 is a high-severity stack-based buffer overflow vulnerability in the Tenda W12 router firmware version 3.0.0.7(4763). The flaw exists in the cgiSysTimeInfoSet function of the /bin/httpd component, where improper handling of the 'sec' argument can lead to memory corruption. This vulnerability can be exploited remotely without user interaction. Although the exploit details have been publicly disclosed, there is no confirmed patch or official remediation available at this time.

A flaw has been found in Tenda W12 3.0.0.7(4763). This affects the function cgistaKickOff of the file /bin/httpd. Executing a manipulation of the argument staMac can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used.

CVE-2026-9431 is a high-severity stack-based buffer overflow vulnerability in the Tenda F1202 router firmware version 1.2.0.20(408). The flaw exists in the fromPptpUserAdd function, specifically in the handling of the opttype argument in the /goform/PptpUserAdd endpoint. This vulnerability can be exploited remotely without user interaction or privileges. Although an exploit is publicly available, there are no confirmed reports of exploitation in the wild. No official patch or remediation guidance has been provided by the vendor as of the publication date.