CVE-2026-10190

EUVD-2026-33512
A vulnerability was found in Tenda W12 3.0.0.7(4763). This issue affects the function cgiSysWebTimeoutSet of the file /bin/httpd of the component Web Management Interface. The manipulation of the argument web_over_time results in denial of service. It is possible to launch the attack remotely. The exploit has been made public and could be used.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Common Weakness Enumeration
References
http://cdn2.v50to.cc/cgiSysWebTimeoutSet_dos.zip
https://vuldb.com/cve/CVE-2026-10190
https://vuldb.com/submit/820022
https://vuldb.com/vuln/367471
https://vuldb.com/vuln/367471/cti
https://www.tenda.com.cn/