← back
CVE-2026-10190

Tenda W12 Web Management httpd cgiSysWebTimeoutSet denial of service

CVSS 7.1 HIGHEPSS 0.4%CWE-404
A vulnerability was found in Tenda W12 3.0.0.7(4763). This issue affects the function cgiSysWebTimeoutSet of the file /bin/httpd of the component Web Management Interface. The manipulation of the argument web_over_time results in denial of service. It is possible to launch the attack remotely. The exploit has been made public and could be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
Tenda · W12
public PoCs found — 1
cve_referencecdn2.v50to.cc/cgiSysWebTimeoutSet_dos.zipunverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://cdn2.v50to.cc/cgiSysWebTimeoutSet_dos.ziphttps://vuldb.com/cve/CVE-2026-10190https://vuldb.com/submit/820022https://vuldb.com/vuln/367471https://vuldb.com/vuln/367471/ctihttps://www.tenda.com.cn/