Tenda w12 vulnerabilities

5 CVEs affecting Tenda w12, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-10192, published 2026-05-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-10192, published 2026-05-31. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was identified in Tenda W12 3.0.0.7(4763). The affected element is the function set_local_time_0 of the file /bin/httpd. Such manipulation of the argument Time leads to stack-based…
CVE-2026-10189, published 2026-05-31. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda W12 3.0.0.7(4763). This vulnerability affects the function cgiSysTimeInfoSet of the file /bin/httpd. The manipulation of the argument sec leads to stack-based…
CVE-2026-10191, published 2026-05-31. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was determined in Tenda W12 3.0.0.7(4763). Impacted is the function cgiWifiMacFilterSet of the file /bin/httpd. This manipulation of the argument wifiMacFilterSet.macList.mac causes…
CVE-2026-10188, published 2026-05-31. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw has been found in Tenda W12 3.0.0.7(4763). This affects the function cgistaKickOff of the file /bin/httpd. Executing a manipulation of the argument staMac can lead to stack-based buffer…
CVE-2026-10190, published 2026-05-31. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was found in Tenda W12 3.0.0.7(4763). This issue affects the function cgiSysWebTimeoutSet of the file /bin/httpd of the component Web Management Interface. The manipulation of the…