Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-10189

Tenda W12 httpd cgiSysTimeInfoSet stack-based overflow

Description

A vulnerability has been found in Tenda W12 3.0.0.7(4763). This vulnerability affects the function cgiSysTimeInfoSet of the file /bin/httpd. The manipulation of the argument sec leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenda W12

  • 3.0.0.7(4763)affected

References