Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.4
CVE-2026-9429: Tenda F1202: Remote Attack via Misused Argument
CVE-2026-9429 · published 5 months ago
Summary
A security flaw in the Tenda F1202 router's software allows an attacker to remotely access and potentially take control of the device. This is because the router's programming does not properly handle a specific argument, which can lead to the device crashing or being compromised. To protect your device, ensure you have the latest software updates installed.
Original advisory text
A vulnerability was found in Tenda F1202 1.2.0.20(408). Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSet. Performing a manipulation of the argument del...
A vulnerability was found in Tenda F1202 1.2.0.20(408). Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSet. Performing a manipulation of the argument delno results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-119Buffer Overflow
CWE-121Stack-based Buffer Overflow
Timeline
Published25 May 2026
Updated4 Nov 2026
First seen26 May 2026
Sources
CVE-2026-9429 · NVD
Track software like this
Free during beta