Tenda BE12 Pro vulnerabilities

6 CVEs affecting Tenda BE12 Pro, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-15696, published 2026-07-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-15696, published 2026-07-14. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda BE12 Pro 16.03.66.23. The impacted element is the function fromVirtualSer of the file /goform/VirtualSer. Such manipulation of the argument page leads to…
CVE-2026-15695, published 2026-07-14. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A flaw has been found in Tenda BE12 Pro 16.03.66.23. The affected element is the function fromDhcpListClient of the file /goform/DhcpListClient. This manipulation of the argument page causes…
CVE-2026-15694, published 2026-07-14. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was detected in Tenda BE12 Pro 16.03.66.23. Impacted is the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page results in stack-based buffer…
CVE-2026-15693, published 2026-07-14. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A security vulnerability has been detected in Tenda BE12 Pro 16.03.66.23. This issue affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the argument page…
CVE-2026-15692, published 2026-07-14. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A weakness has been identified in Tenda BE12 Pro 16.03.66.23. This vulnerability affects the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument…
CVE-2026-15691, published 2026-07-14. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A security flaw has been discovered in Tenda BE12 Pro 16.03.66.23. This affects the function fromSafeClientFilter of the file /goform/SafeClientFilter. Performing a manipulation of the argument page…