Unrated severityNVD Advisory· Published Nov 2, 2025· Updated Feb 24, 2026
Tenda AC23 saveParentControlInfo buffer overflow
CVE-2025-12596
Description
A security vulnerability has been detected in Tenda AC23 16.03.07.52. Affected is the function saveParentControlInfo of the file /goform/saveParentControlInfo. Such manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Affected products
2- Tenda/AC23v5cpe:2.3:o:tenda:ac23_firmware:*:*:*:*:*:*:*:*Range: 16.03.07.52
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- github.com/LX-LX88/cve/issues/9mitrebroken-linkexploitissue-tracking
- vuldb.commitrethird-party-advisory
- vuldb.commitresignaturepermissions-required
- vuldb.commitrevdb-entrytechnical-description
- www.tenda.com.cnmitreproduct
News mentions
0No linked articles in our index yet.