CVE-2026-5684CWE-119CWE-121
Tenda CX12L webExcptypemanFilter fromwebExcptypemanFilter stack-based overflow
High · published April 6, 2026
What it is
A vulnerability was determined in Tenda CX12L 16.03.53.12. Affected by this issue is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack requires access to the local network. The exploit has been publicly disclosed and may be utilized.
The record
Technical detail
- CVSS v4.0
- 8.6 · HIGH
- Vector
- CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
- EPSS
- 0.00687 · 52.1th percentile
- Weaknesses
- CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow
- Published
- 2026-04-06T21:15Z
EPSS history
Timeline