Vulnerabilities

TI-2026-05128 CVE-2026-5849 · GHSA-22fp-cvvv-7ff5

Tenda i12 HTTP path traversal

HIGH 70

A vulnerability was determined in Tenda i12 1.0.0.11(3862).

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00656 Published 2026-04-09 No fix listed CWE-22

TI-2026-04917 CVE-2026-5609 · GHSA-26hh-9qh7-grjv

HIGH 73

A flaw has been found in Tenda i12 1.0.0.11(3862).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00644 Published 2026-04-06 No fix listed CWE-119

TI-2026-03502 CVE-2026-4043 · GHSA-qv82-jp4p-v9c2

HIGH 73

A security vulnerability has been detected in Tenda i12 1.0.0.6(2204).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00646 Published 2026-03-12 No fix listed CWE-119

TI-2026-03501 CVE-2026-4042 · GHSA-wmx5-6ccw-8g4h

HIGH 73

A weakness has been identified in Tenda i12 1.0.0.6(2204).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00922 Published 2026-03-12 No fix listed CWE-119

TI-2026-03500 CVE-2026-4041 · GHSA-4mpj-92xh-89p5

HIGH 73

A security flaw has been discovered in Tenda i12 1.0.0.6(2204).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00875 Published 2026-03-12 No fix listed CWE-119

TI-2025-20998 CVE-2025-29149 · GHSA-pgpf-3pvh-h5g7

HIGH 72

Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the ping1 parameter in the formSetAutoPing function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00484 Published 2025-03-20 No fix listed CWE-121

TI-2025-19091 CVE-2025-25679 · GHSA-f984-xmh4-jcvg

LOW 36

Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the index parameter in the formWifiMacFilterSet function.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00268 Published 2025-02-20 No fix listed CWE-121

TI-2025-19090 CVE-2025-25678 · GHSA-wqvq-w4mh-vpj8

MEDIUM 49

Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0045 Published 2025-02-20 No fix listed CWE-120

TI-2025-19089 CVE-2025-25676 · GHSA-q7m5-gr49-2535

MEDIUM 49

Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the list parameter in the formwrlSSIDset function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0045 Published 2025-02-20 No fix listed CWE-120