SEPTEMBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-15691

HIGH · CVSS 8.8 EPSS 0.47% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-14 · Last synced 2026-08-13

CyberRota Analysis

AI-Generated

A stack-based buffer overflow vulnerability exists in the Tenda BE12 Pro router, specifically in the fromSafeClientFilter function of the /goform/SafeClientFilter file. This flaw allows remote attackers to manipulate arguments, potentially leading to arbitrary code execution. Organizations using this router model should prioritize patching or mitigating this vulnerability to prevent exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-15691
Severity
HIGH
CVSS
8.8
EPSS
0.47%

Original NVD Description

A security flaw has been discovered in Tenda BE12 Pro 16.03.66.23. This affects the function fromSafeClientFilter of the file /goform/SafeClientFilter. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.