CVE-2026-13516 PUBLISHED

A vulnerability was detected in Tenda JD12L 16.03.53.23. The affected element is the function fromSetWifiGusetBasic of the file /goform/WifiGuestSet. Performing a manipulation of the argument shareSpeed results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.

• Vampirensa (VulDB User) reporter

• VDB-374524 | Tenda JD12L WifiGuestSet fromSetWifiGusetBasic stack-based overflow
• VDB-374524 | CTI Indicators (IOB, IOC, IOA)
• CVE-2026-13516 | CVE Analysis and Report
• Submit #838887 | Tenda JD12L pro V16.03.53.23 Stack-based Buffer Overflow
• https://github.com/cve-a/Vampirensa/issues/2
• https://www.tenda.com.cn/

• Stack-based Buffer Overflow CWE
• Memory Corruption CWE