CVE-2026-5683

CVE-2026-5683 affects Tenda CX12L router version 16.03.53.12 and involves a stack-based buffer overflow vulnerability in the P2pListFilter function. An attacker can manipulate the "page" parameter to trigger the overflow, potentially compromising the device's confidentiality, integrity, and availability. The vulnerability requires local network access and valid user credentials to exploit, limiting its immediate threat scope to devices already on the internal network. The CVSS score of 5.5 (Medium) reflects the combination of adjacent network access requirements and low privileges needed, though the potential impacts include information disclosure, system modification, and service disruption. The EPSS score of 0.000110000 indicates this vulnerability is currently not widely targeted compared to other disclosed CVEs, and it is not included on CISA's Known Exploited Vulnerabilities catalog. Public exploit code has been released for this vulnerability, which increases long-term risk potential. However, community attention remains limited based on its inactive status on vulnerability hotlists. Organizations deploying affected Tenda routers should prioritize patching and restrict internal network access to trusted devices only.