Vulnerability · Published Aug 14, 2026 · Assigned by VulDB

CVE-2026-19821Tenda AC12 httpd web management interface SetSysAutoRebbotCfg formSetRebootTimer buffer overflow

High 8.8

In plain English

A high-severity buffer overflow in AC12 from Tenda. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 58% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)0.9%top 41.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was determined in Tenda AC12 15.03.06.23_multi_TD01. This vulnerability affects the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg of the component httpd web management interface. This manipulation of the argument rebootTime causes buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Affected products (as reported)

Vendor	Product	Versions
Tenda	AC12	15.03.06.23_multi_TD01

Weakness: CWE-120, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R

References

VDB-389954 | Tenda AC12 httpd web management interface SetSysAutoRebbotCfg formSetRebootTimer buffer overflow vdb-entry, technical-description
VDB-389954 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-19821 | CVE Analysis and Report third-party-advisory
Submit #868922 | Tenda AC12 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01.bin Buffer Overflow third-party-advisory
https://github.com/lipenghai/iot_bug/blob/main/Tenda/AC12/4.md exploit
https://www.tenda.com.cn/ product