CVE-2026-5685

CVE-2026-5685 is a stack-based buffer overflow vulnerability affecting Tenda CX12L router running firmware version 16.03.53.12, specifically in the fromAddressNat function of the /goform/addressNat endpoint. The vulnerability exists in the page parameter processing and has a publicly available exploit. The vulnerability carries a HIGH severity rating with a CVSS score of 8.8. It requires network access and low-privilege authentication but can be executed without user interaction, allowing attackers to achieve complete confidentiality, integrity, and availability compromise of the affected device. Exploitation status indicates this is not currently on active threat intelligence watchlists. While exploit code is publicly available, the extremely low EPSS score of 0.00018 suggests minimal real-world exploitation activity to date. However, organizations operating vulnerable Tenda CX12L devices should prioritize patching given the public exploit availability and high impact potential.