Tenda Be12 Pro vulnerabilities

CVE-2026-15693 [HIGH] CWE-119 CVE-2026-15693: A security vulnerability has been detected in Tenda BE12 Pro 16.03.66.23. This issue affects the fun A security vulnerability has been detected in Tenda BE12 Pro 16.03.66.23. This issue affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

CVE-2026-15695 [HIGH] CWE-119 CVE-2026-15695: A flaw has been found in Tenda BE12 Pro 16.03.66.23. The affected element is the function fromDhcpLi A flaw has been found in Tenda BE12 Pro 16.03.66.23. The affected element is the function fromDhcpListClient of the file /goform/DhcpListClient. This manipulation of the argument page causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.

CVE-2026-15692 [HIGH] CWE-119 CVE-2026-15692: A weakness has been identified in Tenda BE12 Pro 16.03.66.23. This vulnerability affects the functio A weakness has been identified in Tenda BE12 Pro 16.03.66.23. This vulnerability affects the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used fo

CVE-2026-15694 [HIGH] CWE-119 CVE-2026-15694: A vulnerability was detected in Tenda BE12 Pro 16.03.66.23. Impacted is the function fromSetIpBind o A vulnerability was detected in Tenda BE12 Pro 16.03.66.23. Impacted is the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.

CVE-2026-15696 [HIGH] CWE-119 CVE-2026-15696: A vulnerability has been found in Tenda BE12 Pro 16.03.66.23. The impacted element is the function f A vulnerability has been found in Tenda BE12 Pro 16.03.66.23. The impacted element is the function fromVirtualSer of the file /goform/VirtualSer. Such manipulation of the argument page leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2026-15691 [HIGH] CWE-119 CVE-2026-15691: A security flaw has been discovered in Tenda BE12 Pro 16.03.66.23. This affects the function fromSaf A security flaw has been discovered in Tenda BE12 Pro 16.03.66.23. This affects the function fromSafeClientFilter of the file /goform/SafeClientFilter. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for