CVE-2026-10189 | Tenda W12 3.0.0.7(4763) /bin/httpd cgiSysTimeInfoSet sec stack-based overflow

A vulnerability marked as critical has been reported in Tenda W12 3.0.0.7(4763). This vulnerability affects the function cgiSysTimeInfoSet of the file /bin/httpd. The manipulation of the argument sec leads to stack-based buffer overflow.

This vulnerability is traded as CVE-2026-10189. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.