CVE-2026-9431Disclosure

LOWCVSS 7.4 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was identified in Tenda F1202 1.2.0.20(408). This affects the function fromPptpUserAdd of the file /goform/PptpUserAdd. The manipulation of the argument opttype leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-119CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 3 classified signals
  • Peaked at 2 mentions on most recent observed day (2026-05-25)
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-05-24: 1Mentions · 2026-05-25: 2Technical Details · 2026-05-25: 205-2405-25
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-05-241
Disclosure1
2026-05-252
Disclosure2
Full discourse3 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-9431 A vulnerability was identified in Tenda F1202 1.2.0.20(408). This affects the function fromPptpUserAdd of the file /goform/PptpUserAdd. The manipulation of the argument… https://www.cve.org/CVERecord?id=CVE-2026-9431 ----- Traducción: CVE-2026-9431 Se … http://infoflow.cloud`

    Post summary

    The text announces CVE-2026-9431 as a vulnerability in Tenda F1202, providing details about the affected function and input manipulation, but it does not include a PoC, exploit, or mitigation information.

    0000027
    79 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-9431 A vulnerability was identified in Tenda F1202 1.2.0.20(408). This affects the function fromPptpUserAdd of the file /goform/PptpUserAdd. The manipulation of the argument… https://www.cve.org/CVERecord?id=CVE-2026-9431

    Post summary

    The notice reports a newly identified vulnerability in a Tenda device, describing the affected function and file but providing no PoC, exploit, active exploitation, patch, or false‑positive information.

    00000208
    57.5K followersView on X
  • VulDB 🛡@vuldb
    Disclosure

    A new vulnerability with increased severity was disclosed for Tenda F1202 (CVE-2026-9431) https://vuldb.com/vuln/365412

    Post summary

    The post announces the disclosure of CVE-2026-9431 for the Tenda F1202 router, noting an increased severity rating, but provides no additional technical, exploit, or patch information.

    0000071
    2.2K followersView on X

Explore more