CVE-2026-5609

A flaw has been found in Tenda i12 1.0.0.11(3862). Affected by this vulnerability is the function formwrlSSIDset of the file /goform/wifiSSIDset of the component Parameter Handler. This manipulation of the argument index/wl_radio causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used.

• CWE-119
• CWE-121

• https://github.com/Litengzheng/vuldb_new/blob/main/i12/vul_107/README.mdExploit, Third Party Advisory
• https://vuldb.com/submit/785337Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/355400Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/355400/ctiPermissions Required, VDB Entry
• https://www.tenda.com.cn/Product

Published

Apr 6, 2026

Last Modified

Jul 24, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-56082Capgo (Cap-go/capgo) before 12.128.2 contains an improper ac…8.7
• CVE-2026-56085Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7,…3.3
• CVE-2026-56086Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6,…8.8
• CVE-2026-56087Dell ThinOS 10, versions prior to 2605_10.2100 contain a Pro…6.1
• CVE-2026-56088Dell OpenManage Enterprise, versions prior to 4.7.0, contain…8.8
• CVE-2026-56089Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Pa…3.3
• CVE-2026-56090Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an U…7.3
• CVE-2026-56091When using Apache Shiro with the shiro-guice module in a web…8.2
• CVE-2026-56092The extension forces empty frontend-group and subpage-inheri…7.6
• CVE-2026-56093The extension's frontend detail-view document lookup does no…6.3
• CVE-2026-56094The extension allows a request-provided additionalFilters pa…6.3
• CVE-2026-56095The extension's indexer passed every field value returned by…7.7