CVE-2026-15696 in BE12 Pro

Résumé

par MITRE • 14/07/2026

A vulnerability has been found in Tenda BE12 Pro 16.03.66.23. The impacted element is the function fromVirtualSer of the file /goform/VirtualSer. Such manipulation of the argument page leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: VulDB
• Divulgation: 14/07/2026
• Modérer: accepté
• Entrée: VDB-378243
• CPE: prêt
• CWE: CWE-121 (confirmé)
• Exploitation: Télécharger
• CVSS: 8.8 (VulDB)
• EPSS: 0.00000
• KEV: non
• Activités: faible
• Secteur: Police, Insurance, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-15696
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-15696
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-15696/