Threat Intelligence Database

CVE-2026-7035 is a high-severity stack-based buffer overflow vulnerability in Tenda FH1202 version 1.2.0.14. It affects the httpd component, specifically the fromWrlclientSet function in the /goform/WrlclientSet file. An attacker can remotely exploit this by manipulating the Go argument, potentially causing a buffer overflow. The vulnerability has been publicly disclosed, but no official patch or remediation has been indicated yet.

CVE-2026-7034 is a high-severity stack-based buffer overflow vulnerability in the Tenda FH1202 router firmware version 1.2.0.14(408). The flaw exists in the WrlExtraSet function of the httpd component, where manipulation of the Go argument can trigger the overflow. This vulnerability can be exploited remotely without user interaction or privileges. Although an exploit has been publicly disclosed, there are no known exploits in the wild at this time. No official patch or remediation guidance has been provided by the vendor yet.

CVE-2026-5046 is a high-severity stack-based buffer overflow vulnerability in the Tenda FH1201 router firmware version 1.2.0.14(408). The flaw exists in the formWrlExtraSet function of the /goform/WrlExtraSet component, where manipulation of the GO argument can trigger the overflow. This vulnerability can be exploited remotely without user interaction or privileges. Although an exploit has been published, there are no known exploits observed in the wild yet. No official patch or remediation information is currently available.

A vulnerability was detected in Tenda FH1201 1.2.0.14(408). This impacts the function WrlclientSet of the file /goform/WrlclientSet of the component Parameter Handler. Performing a manipulation of the argument GO results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.

A vulnerability was found in Tenda FH1202 1.2.0.14(408). This impacts the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument page results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.

HighVulnerabilityUnited StatesChinaIndia+9#cve#cve-2026-3811

A vulnerability has been found in Tenda FH1202 1.2.0.14(408). This affects the function fromDhcpListClient of the file /goform/DhcpListClient. The manipulation of the argument page leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

HighVulnerabilityChinaIndiaIndonesia+7#cve#cve-2026-3810

A flaw has been found in Tenda FH1202 1.2.0.14(408). The impacted element is the function fromNatStaticSetting of the file /goform/NatSaticSetting. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been published and may be used.

HighVulnerabilityChinaIndiaRussia+8#cve#cve-2026-3809

A vulnerability was detected in Tenda FH1202 1.2.0.14(408). The affected element is the function formWebTypeLibrary of the file /goform/webtypelibrary. Performing a manipulation of the argument webSiteId results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.

HighVulnerabilityChinaIndiaIndonesia+7#cve#cve-2026-3808

A security vulnerability has been detected in Tenda FH1202 1.2.0.14(408). Impacted is the function formWrlsafeset of the file /goform/AdvSetWrlsafeset. Such manipulation of the argument mit_ssid/mit_ssid_index leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

HighVulnerabilityChinaIndiaRussia+7#cve#cve-2026-3807

Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the deviceId parameter of the formSetDeviceName function.

CriticalVulnerabilityChinaIndiaRussia+9#cve#cve-2024-30596