PT-2026-45200 · Tenda · W12

Cookedmelon · Published 2026-05-31 · Updated 2026-05-31 · CVE-2026-10189

Mitre

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A vulnerability has been found in Tenda W12 3.0.0.7(4763). This vulnerability affects the function cgiSysTimeInfoSet of the file /bin/httpd. The manipulation of the argument sec leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Exploit

Fix

Buffer Overflow

Stack Overflow

Weakness Enumeration

CWE-119

CWE-121

Related Identifiers

CVE-2026-10189

Affected Products

W12

References · 7

• 🔥 http://cdn2.v50to.cc/cgiSysTimeInfoSet_overflow.zip · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10189 · Security Note
• https://vuldb.com/vuln/367470/cti · Note
• https://vuldb.com/cve/CVE-2026-10189 · Note
• https://vuldb.com/submit/820021 · Note
• https://tenda.com.cn · Note
• https://vuldb.com/vuln/367470 · Note