CVE-2026-5046 | Tenda FH1201 1.2.0.14(408) Parameter /goform/WrlExtraSet formWrlExtraSet GO stack-based overflow

A vulnerability was found in Tenda FH1201 1.2.0.14(408). It has been declared as critical. Affected is the function formWrlExtraSet of the file /goform/WrlExtraSet of the component Parameter Handler. Executing a manipulation of the argument GO can lead to stack-based buffer overflow.

This vulnerability appears as CVE-2026-5046. The attack may be performed from remote. In addition, an exploit is available.