CVE-2026-5687

EUVD-2026-19545
A weakness has been identified in Tenda CX12L 16.03.53.12. This issue affects the function fromNatStaticSetting of the file /goform/NatStaticSetting. This manipulation of the argument page causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 10%
Affected Products (NVD)
VendorProductVersion
tendacx12l_firmware
16.03.53.12
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/cve-a/lvdan/issues/5
https://vuldb.com/submit/792785
https://vuldb.com/vuln/355514
https://vuldb.com/vuln/355514/cti
https://www.tenda.com.cn/