HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-5046 — A flaw has been found in Tenda FH1201 1.2.0.14(408). Affected is the function fo...

Sunday, March 29, 2026 at 03:16 PM UTC·Source: NIST NVD

Updated: Friday, April 3, 2026 at 09:52 PM UTC

Executive Summary

A flaw has been found in Tenda FH1201 1.2.0.14(408). Affected is the function formWrlExtraSet of the file /goform/WrlExtraSet of the component Parameter Handler. Executing a manipulation of the argument GO can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used.

Analysis

A flaw has been found in Tenda FH1201 1.2.0.14(408). Affected is the function formWrlExtraSet of the file /goform/WrlExtraSet of the component Parameter Handler. Executing a manipulation of the argument GO can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used. CVSS Score: 8.8. Published: 2026-03-29T15:16:36.990.

Indicators of Compromise (2)

CVE (1)
CVE-2026-5046
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Mar 29, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

StraitsX and KBank enable real-time payments between Singapore and Thailand

Cross-border travel in Southeast Asia continues to grow, but payments often remain fragmented, with travellers still needing to exchange cash, manage multiple payment apps, or face high FX and settlement costs.

Finextra
MEDIUMVulnerabilityNEW

And Digital names Chris Hardy as US strategy and ops chief

AND Digital has continued its expansion in the US market, appointing Chris Hardy as Chief for Strategy & Operations to strengthen the company’s senior leadership and lead growth in the fintech and payments space.

Finextra
MEDIUMVulnerabilityNEW

Balboa Corp launches in Panama to bring stablecoins to shipping and trade finance

BALBOA | CORP , Panama’s first local stablecoin issuer and infrastructure company focused on shipping, trade settlement and escrow, today announced its launch from stealth, unveiling infrastructure designed to reduce payment friction in shipping, trade-finance and international commerce.

Finextra