Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.4
CVE-2026-15691: Tenda BE12 Pro: Remote Attack through Malformed Page Request
CVE-2026-15691 · published 3 months ago
Summary
A security issue in Tenda BE12 Pro allows attackers to send a specially crafted request, potentially allowing them to take control of the device. This could happen remotely, without the need for physical access. Update the device's software to the latest version to protect against potential attacks.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| tenda | be12 pro | 16.03.66.23 |
Original advisory text
Tenda BE12 Pro SafeClientFilter fromSafeClientFilter stack-based overflow
A security flaw has been discovered in Tenda BE12 Pro 16.03.66.23. This affects the function fromSafeClientFilter of the file /goform/SafeClientFilter. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
7.4
High
Type
CWE-121Stack-based Buffer Overflow
CWE-119Buffer Overflow
Timeline
Published14 Jul 2026
Updated3 Nov 2026
First seen14 Jul 2026
Track software like this
Free during beta