CVE-2026-15691: Tenda BE12 Pro SafeClientFilter fromSafeClientFilter stack-based overflow

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-14 · updated 2026-10-24
Weakness: CWE-119

Description

A security flaw has been discovered in Tenda BE12 Pro 16.03.66.23. This affects the function fromSafeClientFilter of the file /goform/SafeClientFilter. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.

Affected products

Tenda BE12 Pro: 16.03.66.23

References

https://github.com/cve-a/dexingzhiqing/issues/1
https://vuldb.com/cve/CVE-2026-15691
https://vuldb.com/submit/855999
https://vuldb.com/vuln/378238
https://vuldb.com/vuln/378238/cti
https://www.tenda.com.cn/

Get alerted when CVE-2026-15691 or the next vulnerability affects your stack