CVE-2026-5609

🗓️ 06 Apr 2026 01:15:13Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 3 Views🌐 WEB

Stack-based overflow in Tenda i12 formwrlSSIDset parameter handler enables remote exploit via wifiSSIDset.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-5609	6 Apr 202601:15	–	attackerkb
Circl	CVE-2026-5609	5 Apr 202616:37	–	circl
CNNVD	Tenda i12 安全漏洞	6 Apr 202600:00	–	cnnvd
Cvelist	CVE-2026-5609 Tenda i12 Parameter wifiSSIDset formwrlSSIDset stack-based overflow	6 Apr 202601:15	–	cvelist
EUVD	EUVD-2026-19148	6 Apr 202603:30	–	euvd
NVD	CVE-2026-5609	6 Apr 202602:16	–	nvd
Positive Technologies	PT-2026-30462	5 Apr 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-5609	7 Apr 202605:12	–	redhatcve
Vulnrichment	CVE-2026-5609 Tenda i12 Parameter wifiSSIDset formwrlSSIDset stack-based overflow	6 Apr 202601:15	–	vulnrichment

NVD

Node

tenda i12_firmwareMatch1.0.0.11(3862)

AND

tenda i12Match-

[
  {
    "vendor": "Tenda",
    "product": "i12",
    "versions": [
      {
        "version": "1.0.0.11(3862)",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:o:tenda:i12_firmware:*:*:*:*:*:*:*:*"
    ],
    "modules": [
      "Parameter Handler"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/vuln/355400
tenda	www.tenda.com.cn/
vuldb	www.vuldb.com/submit/785337
github	www.github.com/Litengzheng/vuldb_new/blob/main/i12/vul_107/README.md
vuldb	www.vuldb.com/vuln/355400/cti

Parameter	Position	Path	Description	CWE
index	request body	/goform/wifiSSIDset	Stack-based buffer overflow in formwrlSSIDset due to manipulated index/wl_radio parameter in /goform/wifiSSIDset, allowing remote exploitation.	CWE-119, CWE-121
wl_radio	request body	/goform/wifiSSIDset	Stack-based buffer overflow in formwrlSSIDset due to manipulated index/wl_radio parameter in /goform/wifiSSIDset, allowing remote exploitation.	CWE-119, CWE-121

30 Apr 2026 13:39Current

7.7High risk

Vulners AI Score7.7

CVSS 48.7

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.00092

SSVC