CVE-2025-12596
Critical · 9.8CVSS
9.8
EPSS
1.2%
Published
Nov 2, 2025
CISA due date
—
The record
A security vulnerability has been detected in Tenda AC23 16.03.07.52. Affected is the function saveParentControlInfo of the file /goform/saveParentControlInfo. Such manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|