CVE-2026-5609: Tenda i12 Parameter wifiSSIDset formwrlSSIDset stack-based overflow

Published Apr 6, 2026

Updated

A flaw has been found in Tenda i12 1.0.0.11(3862). Affected by this vulnerability is the function formwrlSSIDset of the file /goform/wifiSSIDset of the component Parameter Handler. This manipulation of the argument index/wlradio causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used.

Affected Software

3 affected components

Tenda Tenda i12=1.0.0.11(3862)

All of the following

Tenda I12 Firmware=1.0.0.11\(3862\)

Tenda i12

Event History

Apr 6, 2026

CVE Published

via MITRE·01:15 AM

Data Sourced

via MITRE·01:15 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:16 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-5609?

The severity of CVE-2026-5609 is classified as high due to its potential to cause a stack-based buffer overflow.

How do I fix CVE-2026-5609?

To fix CVE-2026-5609, users should update their Tenda i12 firmware to the latest version provided by the manufacturer.

What systems are affected by CVE-2026-5609?

CVE-2026-5609 specifically affects Tenda i12 devices running version 1.0.0.11(3862).

What type of vulnerability is CVE-2026-5609?

CVE-2026-5609 is a stack-based overflow vulnerability related to the handling of parameters in the wifiSSIDset function.

Who is impacted by CVE-2026-5609?

Users of the Tenda i12 device on the specified firmware version are at risk from CVE-2026-5609.