CVE-2026-5046Disclosure(tenda / fh1201)

LOWCVSS 7.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch tenda fh1201 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw has been found in Tenda FH1201 1.2.0.14(408). Affected is the function formWrlExtraSet of the file /goform/WrlExtraSet of the component Parameter Handler. Executing a manipulation of the argument GO can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-119CWE-121

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • fh1201
  • fh1201_firmware

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 3d ago at 1 mentions (2026-03-27); latest day: 1
  • 4 total mentions across 4 days

Affected systems

Vendors
Products
fh1201fh1201_firmware

2 versions affected across 2 products

Deep dive

Activity timeline4 mentions / 4d
00111Mentions · 2026-03-27: 1Mentions · 2026-03-28: 1Mentions · 2026-03-29: 1Mentions · 2026-03-30: 1Patch / Workaround · 2026-03-29: 1Technical Details · 2026-03-29: 103-2703-2803-2903-30
Signal classification3 categories
Disclosure
250.0%
General
125.0%
Patch
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-03-271
General1
2026-03-281
Disclosure1
2026-03-291
Patch1
2026-03-301
Disclosure1
Full discourse4 posts
  • VulDB 🛡@vuldb
    Disclosure

    The severity is increased for this new vulnerability affecting Tenda FH1201 (CVE-2026-5046) https://vuldb.com/vuln/353969

    Post summary

    A new vulnerability (CVE-2026-5046) affecting the Tenda FH1201 is disclosed with an increased severity rating, as referenced by the vuldb link.

    0001075
    2.1K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-5046 A flaw has been found in Tenda FH1201 1.2.0.14(408). Affected is the function formWrlExtraSet of the file /goform/WrlExtraSet of the component Parameter Handler. Execut… https://www.cve.org/CVERecord?id=CVE-2026-5046

    Post summary

    The text announces a new CVE (CVE-2026-5046) affecting Tenda FH1201 routers, noting a flaw in the Parameter Handler's formWrlExtraSet function, with no details on exploitation or mitigation.

    0000080
    56.9K followersView on X
  • CVEFind.com@CveFindCom
    Patch

    [CVE-2026-5046: HIGH] Critical security flaw discovered in Tenda FH1201 1.2.0.14(408) allows for remote buffer overflow attacks via the formWrlExtraSet function. Stay safe and update your system immediately.#cve,CVE-2026-5046,#cybersecurity https://cvefind.com/CVE-2026-5046

    Post summary

    A newly disclosed CVE-2026-5046 enables remote buffer overflow via the formWrlExtraSet function in Tenda FH1201, and users are urged to update immediately to mitigate the high‑severity flaw.

    0000046
    617 followersView on X
  • VulDB 🛡@vuldb
    General

    The severity is increased for this new vulnerability affecting Tenda FH1201 (CVE-2026-5046) https://vuldb.com/?id.353969

    Post summary

    The text notes that the severity of CVE-2026-5046 for Tenda FH1201 has been raised, but provides no further vulnerability details, PoC, exploit, patch, or evidence of active exploitation.

    0000053
    2.1K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
HWtendafh1201---
OStendafh1201_firmware1.2.0.14\(408\)--

Explore more