CVE-2026-10192
A vulnerability was identified in Tenda W12 3.0.0.7(4763). The affected element is the function set_local_time_0 of the file /bin/httpd. Such manipulation of the argument Time leads to stack-based buffer overflow. The attack can be launched remotely. The exploit is publicly available and might be used.
- Score
- CVSS 3.1 8.8 High
- Status
- Deferred - cna@vuldb.com
- Published
- 2026-05-31
- Last modified
- 2026-06-01
- Weaknesses
- CWE-119, CWE-121
Affected products
References
- http://cdn2.v50to.cc/set_local_time_0_overflow.zip
- https://vuldb.com/cve/CVE-2026-10192
- https://vuldb.com/submit/820024
- https://vuldb.com/vuln/367473
- https://vuldb.com/vuln/367473/cti
- https://www.tenda.com.cn/
