PT-2026-45201 · Tenda · W12

Cookedmelon · Published 2026-05-31 · Updated 2026-05-31 · CVE-2026-10190

Mitre

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

A vulnerability was found in Tenda W12 3.0.0.7(4763). This issue affects the function cgiSysWebTimeoutSet of the file /bin/httpd of the component Web Management Interface. The manipulation of the argument web over time results in denial of service. It is possible to launch the attack remotely. The exploit has been made public and could be used.

Exploit

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2026-10190

Affected Products

W12

References · 7

• 🔥 http://cdn2.v50to.cc/cgiSysWebTimeoutSet_dos.zip · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10190 · Security Note
• https://vuldb.com/cve/CVE-2026-10190 · Note
• https://vuldb.com/vuln/367471/cti · Note
• https://tenda.com.cn · Note
• https://vuldb.com/submit/820022 · Note
• https://vuldb.com/vuln/367471 · Note