HIGH
Tenda W12 httpd set_local_time_0 stack-based overflow
Published May 31, 2026
8.7
HIGHCVSS 4.0
EPSS 0.50%
Description
A vulnerability was identified in Tenda W12 3.0.0.7(4763). The affected element is the function set_local_time_0 of the file /bin/httpd. Such manipulation of the argument Time leads to stack-based buffer overflow. The attack can be launched remotely. The exploit is publicly available and might be used.
Affected products
-
- Version 3.0.0.7(4763)StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Tenda | n/a | n/a |
|
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (6)
- http://cdn2.v50to.cc/set_local_time_0_overflow.zip exploit
- https://vuldb.com/cve/CVE-2026-10192 third-party-advisory
- https://vuldb.com/submit/820024 third-party-advisory
- https://vuldb.com/vuln/367473 vdb-entrytechnical-description
- https://vuldb.com/vuln/367473/cti signaturepermissions-required
- https://www.tenda.com.cn/ product
| Link | Providers | Tags |
|---|---|---|
| http://cdn2.v50to.cc/set_local_time_0_overflow.zip | exploit | |
| https://vuldb.com/cve/CVE-2026-10192 | third-party-advisory | |
| https://vuldb.com/submit/820024 | third-party-advisory | |
| https://vuldb.com/vuln/367473 | vdb-entrytechnical-description | |
| https://vuldb.com/vuln/367473/cti | signaturepermissions-required | |
| https://www.tenda.com.cn/ | product |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published May 31, 2026
Updated Jun 1, 2026
Reserved May 30, 2026
Link CVE-2026-10192
CISA Vulnrichment
Updated Jun 1, 2026