CVE-2026-3811Disclosure(tenda / fh1202)

LOWCVSS 7.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch tenda fh1202 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was found in Tenda FH1202 1.2.0.14(408). This impacts the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument page results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.

tenda CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-fh1202-p2plistfilter-page-buffer-overflow

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-119CWE-121

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

fh1202
fh1202_firmware

Threat summary

Patch or workaround signal is available
7 mentions across 4 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 4 signals
Disclosure: 5 classified signals
General: 1 classified signal
Peaked 2d ago at 4 mentions (2026-03-09); latest day: 1
7 total mentions across 4 days

Affected systems

Vendors

tenda

Products

fh1202fh1202_firmware

2 versions affected across 2 products

Deep dive

Activity timeline7 mentions / 4d

Signal classification3 categories

Disclosure

571.4%

General

114.3%

Patch

114.3%

Referenced assets7 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-08	1	Disclosure1
2026-03-09	4	Disclosure4
2026-03-10	1	General1
2026-08-27	1	Patch1

Full discourse7 posts

Yellow Media@YellowMedia_HQ45d
Patch
Core Lightning devs patched two critical vulnerabilities (CVE-2026-3811/3812) that allowed attackers to stall nodes and steal funds. Node operators are urged to update immediately to secure the network https://yellow.com/news/bitcoin-lightning-flaws-patch
Post summary
Core Lightning developers released patches for CVE-2026-3811 and CVE-2026-3812, urging node operators to update immediately to prevent node stalling and fund theft.
1440130018.0K
2.7K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds216d
Disclosure
CVE-2026-3811 Tenda FH1202 Remote Stack-Based Buffer Overflow in P2pListFilter Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3811
Post summary
The post announces CVE-2026-3811, a remote stack-based buffer overflow vulnerability in the Tenda FH1202's P2pListFilter function, as documented on vulmon.com.
0001052
4.0K followersView on X
RedPacket Security@RedPacketSec215d
General
CVE Alert: CVE-2026-3811 - Tenda - FH1202 - https://www.redpacketsecurity.com/cve-alert-cve-2026-3811-tenda-fh1202/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-3811 #tenda #fh1202
Post summary
The tweet shares a link to a CVE alert for CVE-2026-3811 affecting Tenda FH1202, but provides no specific PoC, exploit details, or technical information.
00000108
3.5K followersView on X
CVE@CVEnew215d
Disclosure
CVE-2026-3811 A vulnerability was found in Tenda FH1202 1.2.0.14(408). This impacts the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument… https://www.cve.org/CVERecord?id=CVE-2026-3811
Post summary
The text announces a new vulnerability (CVE-2026-3811) affecting Tenda FH1202, detailing the function and argument manipulation involved, but offers no PoC, exploit details, or mitigation information.
00000107
56.6K followersView on X
CVEarity@CVEarity216d
Disclosure
⚡ New CVE Alert: CVE-2026-3811 📊 Severity: 8.8 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-3811 #CVE-2026-3811 #CVE #High #CyberSecurity #InfoSec https://t.co/wdLnBwxU9f
Post summary
The tweet announces the emergence of CVE-2026-3811 with a high severity rating but offers no further technical, exploit, or remediation information.
0000041
90 followersView on X
CVEFind.com@CveFindCom216d
Disclosure
[CVE-2026-3811: HIGH] Critical vulnerability discovered in Tenda FH1202 1.2.0.14(408), exposing stack-based buffer overflow. Attackers can exploit remotely via fromP2pListFilter function, raising major securit...#cve,CVE-2026-3811,#cybersecurity https://cvefind.com/CVE-2026-3811
Post summary
A stack‑based buffer overflow (CVE‑2026‑3811) was disclosed affecting Tenda FH1202 firmware; it allows remote exploitation through the fromP2pListFilter function, but no PoC, exploit tool, or patch information was provided.
0000067
600 followersView on X
VulDB 🛡@vuldb217d
Disclosure
A new vulnerability with increased severity was disclosed for Tenda FH1202 (CVE-2026-3811) https://vuldb.com/?id.349777
Post summary
A new vulnerability (CVE-2026-3811) affecting Tenda FH1202 was disclosed with increased severity, but no further technical, exploit, or mitigation details were provided.
0000090
2.1K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	tenda	fh1202	-	-	-
OS	tenda	fh1202_firmware	1.2.0.14\(408\)	-	-

Explore more

Back to dashboard tenda CVEs fh1202 vulnerabilities

What researchers are saying

CVE-2026-3811

Yellow Media[verified]@YellowMedia_HQPatch

Core Lightning developers released patches for CVE-2026-3811 and CVE-2026-3812, urging node operators to update immediately to prevent node stalling and fund theft.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The post announces CVE-2026-3811, a remote stack-based buffer overflow vulnerability in the Tenda FH1202's P2pListFilter function, as documented on vulmon.com.

RedPacket Security@RedPacketSecGeneral

The tweet shares a link to a CVE alert for CVE-2026-3811 affecting Tenda FH1202, but provides no specific PoC, exploit details, or technical information.

CVE@CVEnewDisclosure

The text announces a new vulnerability (CVE-2026-3811) affecting Tenda FH1202, detailing the function and argument manipulation involved, but offers no PoC, exploit details, or mitigation information.

CVEarity@CVEarityDisclosure

The tweet announces the emergence of CVE-2026-3811 with a high severity rating but offers no further technical, exploit, or remediation information.

CVEFind.com@CveFindComDisclosure

A stack‑based buffer overflow (CVE‑2026‑3811) was disclosed affecting Tenda FH1202 firmware; it allows remote exploitation through the fromP2pListFilter function, but no PoC, exploit tool, or patch information was provided.

VulDB 🛡@vuldbDisclosure

A new vulnerability (CVE-2026-3811) affecting Tenda FH1202 was disclosed with increased severity, but no further technical, exploit, or mitigation details were provided.