Is CVE-2026-15695 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-15695?

CVE-2026-15695 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-15695

Description

A flaw has been found in Tenda BE12 Pro 16.03.66.23. The affected element is the function fromDhcpListClient of the file /goform/DhcpListClient. This manipulation of the argument page causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.