CVE-2026-8138: Tenda CX12L SetPptpServerCfg” formSetPPTPServer stack-based overflow
A vulnerability was found in Tenda CX12L 16.03.53.12. This issue affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg”. The manipulation results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8138?
CVE-2026-8138 has a high severity rating due to the potential for remote code execution via stack-based buffer overflow.
How do I fix CVE-2026-8138?
To fix CVE-2026-8138, it is recommended to update the Tenda CX12L device to the latest firmware version provided by the manufacturer.
What are the potential impacts of CVE-2026-8138?
Exploitation of CVE-2026-8138 could allow an attacker to execute arbitrary code with the privileges of the affected device.
Is CVE-2026-8138 remotely exploitable?
Yes, CVE-2026-8138 is remotely exploitable, allowing attackers to compromise the device without physical access.
Which devices are affected by CVE-2026-8138?
CVE-2026-8138 specifically affects the Tenda CX12L router running firmware version 16.03.53.12.