CVE-2026-13515: Tenda JD12L SetPptpServerCfg formSetPPTPServer stack-based overflow
A security vulnerability has been detected in Tenda JD12L 16.03.53.23. Impacted is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. Such manipulation of the argument startIp leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-13515?
The severity of CVE-2026-13515 is rated as high with a score of 8.8.
What type of vulnerability is identified in CVE-2026-13515?
CVE-2026-13515 is classified as a stack-based buffer overflow vulnerability.
How do I fix CVE-2026-13515?
To mitigate CVE-2026-13515, update your Tenda JD12L firmware to the latest version provided by the manufacturer.
What impact does CVE-2026-13515 have on Tenda JD12L?
CVE-2026-13515 can be exploited remotely, leading to potential unauthorized access or control over the device.
Is it safe to use Tenda JD12L without addressing CVE-2026-13515?
It is not safe to use Tenda JD12L without addressing CVE-2026-13515 due to the high risk of exploitation.