CVE-2026-5686 - Tenda CX12L RouteStatic fromRouteStatic stack-based overflow

Back Back to CVE browser

HIGH

Tenda CX12L RouteStatic fromRouteStatic stack-based overflow

Published Apr 6, 2026

8.7

HIGH

CVSS 4.0

EPSS 0.99%

Description

A security flaw has been discovered in Tenda CX12L 16.03.53.12. This vulnerability affects the function fromRouteStatic of the file /goform/RouteStatic. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

Affected products

Vendor Tenda Product CX12L Default
n/a
- Version
  16.03.53.12
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Tenda

CX12L

n/a

Version	Status	Constraints
16.03.53.12	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-121

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-19543
Advisory
https://github.com/cve-a/lvdan/issues/4
exploitissue-trackingIssue TrackingMitigationThird Party Advisory
https://vuldb.com/submit/792783
third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/vuln/355513
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/vuln/355513/cti
signaturepermissions-requiredPermissions RequiredVDB Entry
https://www.tenda.com.cn/
product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-19543		Advisory
https://github.com/cve-a/lvdan/issues/4		exploitissue-trackingIssue TrackingMitigationThird Party Advisory
https://vuldb.com/submit/792783		third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/vuln/355513		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/vuln/355513/cti		signaturepermissions-requiredPermissions RequiredVDB Entry
https://www.tenda.com.cn/		product