CVE-2026-15691: Tenda BE12 Pro SafeClientFilter fromSafeClientFilter stack-based overflow

Published Jul 14, 2026

Updated

A security flaw has been discovered in Tenda BE12 Pro 16.03.66.23. This affects the function fromSafeClientFilter of the file /goform/SafeClientFilter. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.

Affected Software

1 affected component

Tenda Tenda BE12 Pro=16.03.66.23

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Tenda BE12 Pro SafeClientFilter to a version that resolves this vulnerability.
Fixed in 16.03.66.23

Event History

Jul 14, 2026

CVE Published

via MITRE·12:15 PM

Data Sourced

via MITRE·12:15 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-15691?

CVE-2026-15691 has a severity rating of 8.8, categorized as high.

What is the risk associated with CVE-2026-15691?

The risk associated with CVE-2026-15691 is classified as 78.

How do I fix CVE-2026-15691?

To fix CVE-2026-15691, apply the latest security updates released by Tenda for the BE12 Pro device.

What type of vulnerability is CVE-2026-15691?

CVE-2026-15691 is identified as a stack-based buffer overflow vulnerability.

Can CVE-2026-15691 be exploited remotely?

Yes, CVE-2026-15691 can be exploited remotely due to its nature.