Ghostwire

CVE-2026-8138: A vulnerability was found in Tenda CX12L 16.03.53.12. This issue affects the function formSetPPTPServer of the file...

HIGH CVSS 7.5 Exploit Available

Published: May 8, 2026 | Last Modified: May 8, 2026

Description

A vulnerability was found in Tenda CX12L 16.03.53.12. This issue affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg”. The manipulation results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.

Ghostwire Analysis — What This Means Practically

High CVSS score indicates significant risk — exploitation could lead to substantial data exposure or system compromise.
Exploit code is reported to be available, increasing the likelihood of active exploitation.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (2 articles)

References

www.tenable.com/cve/CVE-2026-8138
www.cnnvd.org.cn/home/globalSearch?keyword=CVE-2026-8138
github.com/cve-a/lvdan/issues/6
vuldb.com/submit/808867
vuldb.com/vuln/361927
vuldb.com/vuln/361927/cti
www.tenda.com.cn/
nvd.nist.gov/vuln/detail/CVE-2026-8138