CVE-2026-5684: Tenda CX12L webExcptypemanFilter fromwebExcptypemanFilter stack-based overflow

Published Apr 6, 2026

Updated

A vulnerability was determined in Tenda CX12L 16.03.53.12. Affected by this issue is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack requires access to the local network. The exploit has been publicly disclosed and may be utilized.

Affected Software

3 affected components

Tenda CX12L=16.03.53.12

All of the following

Tenda Cx12l Firmware=16.03.53.12

Tenda CX12L

Event History

Apr 6, 2026

CVE Published

via MITRE·09:15 PM

Data Sourced

via MITRE·09:15 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:16 PM

DescriptionSeverityWeaknessAffected Software

May 21, 58305

Event

via NVD·06:42 PM

Frequently Asked Questions

What is the severity of CVE-2026-5684?

CVE-2026-5684 is a stack-based overflow vulnerability in Tenda CX12L firmware version 16.03.53.12.

How do I fix CVE-2026-5684?

To fix CVE-2026-5684, updating the Tenda CX12L firmware to a version that addresses this vulnerability is recommended.

What are the consequences of exploiting CVE-2026-5684?

Exploiting CVE-2026-5684 can lead to unauthorized access and manipulation of the Tenda CX12L device.

Which Tenda CX12L versions are affected by CVE-2026-5684?

Only the Tenda CX12L firmware version 16.03.53.12 is affected by CVE-2026-5684.

Where can I find more information about CVE-2026-5684?

Additional information about CVE-2026-5684 can be found in security advisories and vulnerability databases.