← back
CVE-2026-10191

Tenda W12 httpd cgiWifiMacFilterSet stack-based overflow

CVSS 8.7 HIGHEPSS 0.5%CWE-119CWE-121
A vulnerability was determined in Tenda W12 3.0.0.7(4763). Impacted is the function cgiWifiMacFilterSet of the file /bin/httpd. This manipulation of the argument wifiMacFilterSet.macList.mac causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
Tenda · W12
public PoCs found — 1
cve_referencecdn2.v50to.cc/cgiWifiMacFilterSet_overflow.zipunverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://cdn2.v50to.cc/cgiWifiMacFilterSet_overflow.ziphttps://vuldb.com/cve/CVE-2026-10191https://vuldb.com/submit/820023https://vuldb.com/vuln/367472https://vuldb.com/vuln/367472/ctihttps://www.tenda.com.cn/