Unrated severityNVD Advisory· Published Mar 29, 2026· Updated Mar 30, 2026
Tenda FH1201 Parameter WrlExtraSet formWrlExtraSet stack-based overflow
CVE-2026-5046
Description
A flaw has been found in Tenda FH1201 1.2.0.14(408). Affected is the function formWrlExtraSet of the file /goform/WrlExtraSet of the component Parameter Handler. Executing a manipulation of the argument GO can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used.
Affected products
2- Tenda/FH1201v5cpe:2.3:o:tenda:fh1201_firmware:*:*:*:*:*:*:*:*Range: 1.2.0.14(408)
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- github.com/Litengzheng/vul_db/blob/main/FH1201/vul_44/README.mdmitreexploit
- vuldb.com/submit/779127mitrethird-party-advisory
- vuldb.com/vuln/353969mitrevdb-entrytechnical-description
- vuldb.com/vuln/353969/ctimitresignaturepermissions-required
- www.tenda.com.cnmitreproduct
News mentions
0No linked articles in our index yet.