← Database

CVE-2026-5686

HIGH CVSS: 8.8 Published: 2026-04-06 Modified: 2026-07-24

Description

A security flaw has been discovered in Tenda CX12L 16.03.53.12. This vulnerability affects the function fromRouteStatic of the file /goform/RouteStatic. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

Affected Platforms

Tenda Cx12L FirmwareTenda Cx12L

Weakness Type

CWE-119, CWE-121

References