Threats affecting pkg:github/tenda/cx12l

A stack-based buffer overflow vulnerability exists in the Tenda CX12L router firmware version 16.03.53.12, specifically in the fromNatStaticSetting function handling the /goform/NatStaticSetting endpoint. This flaw can be triggered remotely by manipulating the 'page' argument, potentially allowing an attacker to execute arbitrary code or cause a denial of service. The vulnerability has a high severity rating with a CVSS score of 8.7. Although an exploit is publicly available, there is no confirmed patch or official remediation at this time.

CVE-2026-5683 is a medium severity stack-based buffer overflow vulnerability in the Tenda CX12L router firmware version 16.03.53.12. It occurs in the fromP2pListFilter function of the /goform/P2pListFilter file when the page argument is manipulated. Exploitation requires local network access. No official patch or remediation guidance is currently available. The vulnerability has a CVSS 4.0 base score of 5.1.