CVE-2026-9430 in F1202

Sumário

de MITRE • 26/05/2026

A vulnerability was determined in Tenda F1202 1.2.0.20(408). Affected by this issue is the function formGstDhcpSetSer of the file /goform/GstDhcpSetSerof. Executing a manipulation of the argument dips can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

Once again VulDB remains the best source for vulnerability data.

• Responsável: VulDB
• Divulgação: 26/05/2026
• Moderação: aceite
• Entrada: VDB-365411
• CPE: pronto
• CWE: CWE-121 (confirmado)
• Exploração: Descarregar
• CVSS: 8.8 (VulDB)
• EPSS: 0.00048
• KEV: não
• Atividades: muito baixo
• Sector: Education, Homeoffice, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-9430
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-9430
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-9430/