Tenda CX12L Firmware vulnerabilities

6 CVEs affecting Tenda CX12L Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-8138, published 2026-05-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-8138, published 2026-05-08. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was found in Tenda CX12L 16.03.53.12. This issue affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg”. The manipulation results in stack-based buffer overflow.…
CVE-2026-5687, published 2026-04-06. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A weakness has been identified in Tenda CX12L 16.03.53.12. This issue affects the function fromNatStaticSetting of the file /goform/NatStaticSetting. This manipulation of the argument page causes…
CVE-2026-5686, published 2026-04-06. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A security flaw has been discovered in Tenda CX12L 16.03.53.12. This vulnerability affects the function fromRouteStatic of the file /goform/RouteStatic. The manipulation of the argument page results…
CVE-2026-5685, published 2026-04-06. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was identified in Tenda CX12L 16.03.53.12. This affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument page leads to stack-based buffer…
CVE-2026-5684, published 2026-04-06. High severity, CVSS 8.0. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability was determined in Tenda CX12L 16.03.53.12. Affected by this issue is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. Executing a manipulation of the…
CVE-2026-5683, published 2026-04-06. High severity, CVSS 8.0. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability was found in Tenda CX12L 16.03.53.12. Affected by this vulnerability is the function fromP2pListFilter of the file /goform/P2pListFilter. Performing a manipulation of the argument…