CVE-2026-5687Disclosure(tenda / cx12l)

LOWCVSS 7.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A weakness has been identified in Tenda CX12L 16.03.53.12. This issue affects the function fromNatStaticSetting of the file /goform/NatStaticSetting. This manipulation of the argument page causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-119CWE-121

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • cx12l
  • cx12l_firmware

Threat summary

  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 4 classified signals
  • Peaked 1d ago at 3 mentions (2026-04-06); latest day: 1
  • 4 total mentions across 2 days

Affected systems

Vendors
Products
cx12lcx12l_firmware

2 versions affected across 2 products

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-04-06: 3Mentions · 2026-04-07: 1Technical Details · 2026-04-06: 2Technical Details · 2026-04-07: 104-0604-07
Signal classification1 categories
Disclosure
4100.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-04-063
Disclosure3
2026-04-071
Disclosure1
Full discourse4 posts
  • VulDB 🛡@vuldb
    Disclosure

    The severity is increased for this new vulnerability affecting Tenda CX12L (CVE-2026-5687) https://vuldb.com/vuln/355514

    Post summary

    The post announces that the severity of a new vulnerability (CVE‑2026‑5687) affecting the Tenda CX12L router has been raised, with no details on exploit code, ongoing attacks, or patches.

    01010110
    2.1K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-5687 Stack-Based Buffer Overflow in Tenda CX12L 16.03.53.12 NatStaticSetting Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5687

    Post summary

    CVE-2026-5687 is reported as a stack‑based buffer overflow in the NatStaticSetting function of Tenda CX12L firmware 16.03.53.12; no PoC, exploit, patch, or active exploitation details are provided.

    0000050
    4.0K followersView on X
  • CVEFind.com@CveFindCom
    Disclosure

    [CVE-2026-5687: HIGH] Critical vulnerability in Tenda CX12L 16.03.53.12 allows remote attackers to trigger a stack-based buffer overflow via /goform/NatStaticSetting, enabling unauthorized access.#cve,CVE-2026-5687,#cybersecurity https://cvefind.com/CVE-2026-5687

    Post summary

    The post announces a critical stack-based buffer overflow vulnerability in Tenda CX12L firmware, indicating potential for unauthorized access.

    0000044
    619 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-5687 A weakness has been identified in Tenda CX12L 16.03.53.12. This issue affects the function fromNatStaticSetting of the file /goform/NatStaticSetting. This manipulation … https://www.cve.org/CVERecord?id=CVE-2026-5687

    Post summary

    The post announces a vulnerability in the Tenda CX12L router (CVE‑2026‑5687), noting its impact on the fromNatStaticSetting function, but provides no PoC, exploit details, patch, or active exploitation evidence.

    00000164
    57.0K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
HWtendacx12l---
OStendacx12l_firmware16.03.53.12--

Explore more