CVE-2026-10190
A vulnerability was found in Tenda W12 3.0.0.7(4763). This issue affects the function cgiSysWebTimeoutSet of the file /bin/httpd of the component Web Management Interface. The manipulation of the argument web_over_time results in denial of service. It is possible to launch the attack remotely. The exploit has been made public and could be used.
- Score
- CVSS 4.0 7.1 High
- Status
- Deferred - cna@vuldb.com
- Published
- 2026-05-31
- Last modified
- 2026-06-01
- Weaknesses
- CWE-404
Affected products
References
- http://cdn2.v50to.cc/cgiSysWebTimeoutSet_dos.zip
- https://vuldb.com/cve/CVE-2026-10190
- https://vuldb.com/submit/820022
- https://vuldb.com/vuln/367471
- https://vuldb.com/vuln/367471/cti
- https://www.tenda.com.cn/
