CVE-2026-8138 | Tenda CX12L 16.03.53.12 SetPptpServerCfg” formSetPPTPServer stack-based overflow

A vulnerability described as critical has been identified in Tenda CX12L 16.03.53.12. This issue affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg”. The manipulation results in stack-based buffer overflow.

This vulnerability is identified as CVE-2026-8138. The attack can be executed remotely. Additionally, an exploit exists.