CVE-2026-10188
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
In Tenda W12 version 3.0.0.7(4763), a vulnerability exists in the cgistaKickOff function of the /bin/httpd file. Manipulation of the staMac argument leads to a stack-based buffer overflow, which can be exploited remotely. The exploit has been publicly disclosed.
Risk Assessment
An attacker can remotely cause device crashes or potentially execute arbitrary code, compromising network security.
Recommendation
Contact Tenda for a firmware update or consider replacing the device with a patched model.
Other vulnerabilities in Tenda W12
See all- CVE-2026-10192High
In Tenda W12 version 3.0.0.7(4763), a stack-based buffer overflow exists in the set_local_time_0 function in /bin/httpd when manipulating the Time argument. Remote exploitation is possible. The exploit is public.
- CVE-2026-10191High
In Tenda W12 version 3.0.0.7(4763), a vulnerability exists in the cgiWifiMacFilterSet function of the /bin/httpd file. Manipulation of the wifiMacFilterSet.macList.mac argument leads to a stack-based buffer overflow, which can be exploited remotely. The exploit has been publicly disclosed.
- CVE-2026-10190Medium
A vulnerability was found in Tenda W12 3.0.0.7(4763). It affects the cgiSysWebTimeoutSet function in the file /bin/httpd of the Web Management Interface component. Manipulating the web_over_time argument results in denial of service. The attack can be launched remotely. The exploit has been made public.
- CVE-2026-10189High
A stack-based buffer overflow vulnerability was found in the cgiSysTimeInfoSet function in /bin/httpd of Tenda W12 router version 3.0.0.7(4763). Remote attack is possible by manipulating the sec argument. The exploit has been publicly disclosed.
Original NVD description (English source)
A flaw has been found in Tenda W12 3.0.0.7(4763). This affects the function cgistaKickOff of the file /bin/httpd. Executing a manipulation of the argument staMac can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used.