CVE-2026-4041 | Tenda i12 1.0.0.6(2204) /goform/exeCommand vos_strcpy cmdinput stack-based overflow

A vulnerability categorized as critical has been discovered in Tenda i12 1.0.0.6(2204). Impacted is the function vos_strcpy of the file /goform/exeCommand. The manipulation of the argument cmdinput results in stack-based buffer overflow.

This vulnerability is reported as CVE-2026-4041. The attack can be launched remotely. Moreover, an exploit is present.