What is GHSA-cxw3-26xc-7ppc?

GHSA-cxw3-26xc-7ppc is a security advisory published by GitHub Security Advisories with High severity. A weakness has been identified in Tenda BE12 Pro 16.03.66.23. This vulnerability affects the...

Which CVE IDs does GHSA-cxw3-26xc-7ppc cover?

GHSA-cxw3-26xc-7ppc covers the following CVE IDs: CVE-2026-15692. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-cxw3-26xc-7ppc?

GHSA-cxw3-26xc-7ppc has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-cxw3-26xc-7ppcHighCVSS 8.8

A weakness has been identified in Tenda BE12 Pro 16.03.66.23. This vulnerability affects the...

Vendor

GitHub Security Advisories

Published

July 14, 2026

Last Modified

July 14, 2026

🔗 CVE IDs covered (1)

CVE-2026-15692 →

📋 Description

A weakness has been identified in Tenda BE12 Pro 16.03.66.23. This vulnerability affects the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

🔗 References (8)

https://nvd.nist.gov/vuln/detail/CVE-2026-15692
https://github.com/cve-a/dexingzhiqing/issues/2
https://vuldb.com/cve/CVE-2026-15692
https://vuldb.com/submit/856010
https://vuldb.com/vuln/378239
https://vuldb.com/vuln/378239/cti
https://www.tenda.com.cn
https://github.com/advisories/GHSA-cxw3-26xc-7ppc