0.0
NA
CVE-2026-9430
Tenda F1202 GstDhcpSetSerof formGstDhcpSetSer stack-based overflow
Description

A vulnerability was determined in Tenda F1202 1.2.0.20(408). Affected by this issue is the function formGstDhcpSetSer of the file /goform/GstDhcpSetSerof. Executing a manipulation of the argument dips can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

INFO

Published Date :

May 25, 2026, 5:30 a.m.

Last Modified :

May 25, 2026, 5:30 a.m.

Remotely Exploit :

No

Source :

VulDB
Affected Products

The following products are affected by CVE-2026-9430 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

No affected product recoded yet

Solution
Update the firmware to a version that addresses the stack-based buffer overflow vulnerability.
  • Update the device firmware to the latest version.
  • Apply vendor-released patches for Tenda devices.
  • Monitor for security advisories from Tenda.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2026-9430 vulnerability anywhere in the article.

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.