PT-2026-45137 · Tenda · W12

Cookedmelon · Published 2026-05-06 · Updated 2026-06-07 · CVE-2026-10192

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tenda W12 version 3.0.0.7(4763)

Description A stack-based buffer overflow occurs in the /bin/httpd file. The issue is triggered by manipulating the Time argument within the set local time 0() function, allowing for remote attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

BDU:2026-07634

CVE-2026-10192

Affected Products

W12

References · 16

• 🔥 http://cdn2.v50to.cc/set_local_time_0_overflow.zip · Exploit
• https://bdu.fstec.ru/vul/2026-07634 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-10192 · Security Note
• https://github.com/advisories/GHSA-hxxc-3ccm-q96j · Note
• https://twitter.com/vuldb/status/2060769264500703256 · Twitter Post
• https://vuldb.com/submit/820024 · Note
• https://vuldb.com/cve/CVE-2026-10192 · Note
• https://vuldb.com/vuln/367473 · Note
• https://twitter.com/VulmonFeeds/status/2061178421498003643 · Twitter Post
• https://twitter.com/HugoValters/status/2063661513299099779 · Twitter Post
• https://feedly.com/cve/CVE-2026-10192 · Note
• https://t.me/CVEtracker/55399 · Telegram Post
• https://t.me/cveNotify/165383 · Telegram Post
• https://tenda.com.cn · Note
• https://twitter.com/CVEnew/status/2061216638213509241 · Twitter Post