Which versions of Tenda are affected by CVE-2026-5685?

Tenda CX12L router firmware version 16.03.53.12 contains a remote code execution vulnerability that allows authenticated users to crash the device or execute arbitrary commands through a stack buffer…

Is there a public PoC exploit available for CVE-2026-5685?

Yes, a public proof-of-concept exploit is available for CVE-2026-5685. Prioritise patching immediately. EPSS: 0.0%.

Tenda CVE-2026-5685

Q: What is the CVSS score of CVE-2026-5685?

CVE-2026-5685 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-19541 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-04-06 VulDB

GHSA-frp6-hv3g-9wcp

Buffer Overflow Stack Overflow Tenda

7.4

CVSS 4.0

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 29, 2026 - 22:52 vuln.today

cvss_changed

PoC Detected

Apr 07, 2026 - 13:20 vuln.today

Public exploit code

EUVD ID Assigned

Apr 06, 2026 - 21:46 euvd

EUVD-2026-19541

Analysis Generated

Apr 06, 2026 - 21:46 vuln.today

CVE Published

Apr 06, 2026 - 21:30 nvd

HIGH 7.4

DescriptionNVD

A vulnerability was identified in Tenda CX12L 16.03.53.12. This affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used.

AnalysisAI

Remote code execution in Tenda CX12L firmware version 16.03.53.12 allows authenticated attackers to overflow stack buffers via malicious 'page' parameter values sent to the addressNat endpoint (/goform/addressNat). The fromAddressNat function fails to validate input length, enabling memory corruption with high impact to confidentiality, integrity, and availability. …

RemediationAI

Within 24 hours: Identify and inventory all Tenda CX12L devices running firmware 16.03.53.12 in your network; restrict administrative console access to trusted personnel only. Within 7 days: Implement network segmentation to isolate affected routers from sensitive systems; monitor authentication logs for unauthorized access attempts to the /goform/addressNat endpoint. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

CVE-2026-5685 vulnerability details – vuln.today

Back

Tenda CVE-2026-5685

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

RemediationAI

Analysis

Full analysis requires sign-in

Share

Tenda CVE-2026-5685

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

RemediationAI

Full analysis requires sign-in

Share

External POC / Exploit Code