CVE-2026-9428— Tenda F1202 PPTPUserSetting fromPPTPUserSetting stack-based overflow
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-9428
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Tenda F1202 PPTPUserSetting fromPPTPUserSetting stack-based overflow
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability has been found in Tenda F1202 1.2.0.20(408). Affected is the function fromPPTPUserSetting of the file /goform/PPTPUserSetting. Such manipulation of the argument delno leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
栈缓冲区溢出
Source: NVD (National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-9428
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-9428
请登录查看更多情报信息。
Other References for CVE-2026-9428 (1)
Same Patch Batch · Tenda · 2026-05-25 · 4 CVEs total
| CVE-2026-9431 | 8.8 HIGH | Tenda F1202 PptpUserAdd fromPptpUserAdd stack-based overflow |
| CVE-2026-9430 | 8.8 HIGH | Tenda F1202 GstDhcpSetSerof formGstDhcpSetSer stack-based overflow |
| CVE-2026-9429 | 8.8 HIGH | Tenda F1202 WrlExtraSet formWrlExtraSet stack-based overflow |
IV. Related Vulnerabilities
Same product: F1202
- CVE-2026-9431
Tenda F1202 PptpUserAdd fromPptpUserAdd stack-based overflow - CVE-2026-9430
Tenda F1202 GstDhcpSetSerof formGstDhcpSetSer stack-based ov - CVE-2026-9429
Tenda F1202 WrlExtraSet formWrlExtraSet stack-based overflow - CVE-2025-9806
Tenda F1202 Administrative shadow hard-coded credentials - CVE-2024-3878
Tenda F1202 webExcptypemanFilter fromwebExcptypemanFilter st
Same vendor: Tenda
- CVE-2026-9431
Tenda F1202 PptpUserAdd fromPptpUserAdd stack-based overflow - CVE-2026-9430
Tenda F1202 GstDhcpSetSerof formGstDhcpSetSer stack-based ov - CVE-2026-9429
Tenda F1202 WrlExtraSet formWrlExtraSet stack-based overflow - CVE-2026-9389
Tenda F456 L7Im frmL7ImForm buffer overflow - CVE-2026-8265
Tenda AC6 httpd getLogFile get_log_file os command injection
Same weakness: CWE-121
- CVE-2026-9431
Tenda F1202 PptpUserAdd fromPptpUserAdd stack-based overflow - CVE-2026-9430
Tenda F1202 GstDhcpSetSerof formGstDhcpSetSer stack-based ov - CVE-2026-9429
Tenda F1202 WrlExtraSet formWrlExtraSet stack-based overflow - CVE-2026-9427
Edimax EW-7438RPn webs formWlSiteSurvey stack-based overflow - CVE-2026-9426
Edimax EW-7438RPn formHwSet stack-based overflow
V. Comments for CVE-2026-9428
No comments yet