Tenda JD12L vulnerabilities

5 CVEs affecting Tenda JD12L, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-13519, published 2026-06-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-13519, published 2026-06-29. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was found in Tenda JD12L 16.03.53.23. This impacts the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the argument page results in stack-based…
CVE-2026-13518, published 2026-06-29. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda JD12L 16.03.53.23. This affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument page leads to stack-based buffer…
CVE-2026-13517, published 2026-06-29. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A flaw has been found in Tenda JD12L 16.03.53.23. The impacted element is the function formWifiBasicSet of the file /goform/WifiBasicSet. Executing a manipulation of the argument security_5g can lead…
CVE-2026-13516, published 2026-06-29. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was detected in Tenda JD12L 16.03.53.23. The affected element is the function fromSetWifiGusetBasic of the file /goform/WifiGuestSet. Performing a manipulation of the argument…
CVE-2026-13515, published 2026-06-29. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A security vulnerability has been detected in Tenda JD12L 16.03.53.23. Impacted is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. Such manipulation of the argument startIp leads…