Router

Tenda BE12 Pro

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
First installation
see forum
Sources

Features & details

Check the project and hardware shown for each feature.

OpenWrt

OpenWrt — Source documentation (openwrt.org)

Installation routes recorded
see forum
Recovery routes recorded
see forum
Availability recorded by source
Available 2025

Hardware details

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVSS 8.7 (v4.0)

BE12 Pro

Tenda BE12 Pro VirtualSer fromVirtualSer stack-based overflow

CVE-2026-15696

Affected firmware
16.03.66.23
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources

A vulnerability has been found in Tenda BE12 Pro 16.03.66.23. The impacted element is the function fromVirtualSer of the file /goform/VirtualSer. Such manipulation of the argument page leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

VDB-378243 | Tenda BE12 Pro VirtualSer fromVirtualSer stack-based overflow — BE12 Pro (vuldb.com) ↗VDB-378243 | CTI Indicators (IOB, IOC, IOA) — BE12 Pro (vuldb.com) ↗CVE-2026-15696 | CVE Analysis and Report — BE12 Pro (vuldb.com) ↗Submit #856019 | Tenda BE12 Pro V16.03.66.23 Stack-based Buffer Overflow — BE12 Pro (vuldb.com) ↗

CVSS 8.7 (v4.0)

BE12 Pro

Tenda BE12 Pro DhcpListClient fromDhcpListClient stack-based overflow

CVE-2026-15695

Affected firmware
16.03.66.23
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources

A flaw has been found in Tenda BE12 Pro 16.03.66.23. The affected element is the function fromDhcpListClient of the file /goform/DhcpListClient. This manipulation of the argument page causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.

VDB-378242 | Tenda BE12 Pro DhcpListClient fromDhcpListClient stack-based overflow — BE12 Pro (vuldb.com) ↗VDB-378242 | CTI Indicators (IOB, IOC, IOA) — BE12 Pro (vuldb.com) ↗CVE-2026-15695 | CVE Analysis and Report — BE12 Pro (vuldb.com) ↗Submit #856017 | Tenda BE12 Pro V16.03.66.23 Stack-based Buffer Overflow — BE12 Pro (vuldb.com) ↗

CVSS 8.7 (v4.0)

BE12 Pro

Tenda BE12 Pro SetIpBind fromSetIpBind stack-based overflow

CVE-2026-15694

Affected firmware
16.03.66.23
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources

A vulnerability was detected in Tenda BE12 Pro 16.03.66.23. Impacted is the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.

VDB-378241 | Tenda BE12 Pro SetIpBind fromSetIpBind stack-based overflow — BE12 Pro (vuldb.com) ↗VDB-378241 | CTI Indicators (IOB, IOC, IOA) — BE12 Pro (vuldb.com) ↗CVE-2026-15694 | CVE Analysis and Report — BE12 Pro (vuldb.com) ↗Submit #856015 | Tenda BE12 Pro V16.03.66.23 Stack-based Buffer Overflow — BE12 Pro (vuldb.com) ↗

CVSS 8.7 (v4.0)

BE12 Pro

Tenda BE12 Pro SafeMacFilter fromSafeMacFilter stack-based overflow

CVE-2026-15693

Affected firmware
16.03.66.23
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources

A security vulnerability has been detected in Tenda BE12 Pro 16.03.66.23. This issue affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

VDB-378240 | Tenda BE12 Pro SafeMacFilter fromSafeMacFilter stack-based overflow — BE12 Pro (vuldb.com) ↗VDB-378240 | CTI Indicators (IOB, IOC, IOA) — BE12 Pro (vuldb.com) ↗CVE-2026-15693 | CVE Analysis and Report — BE12 Pro (vuldb.com) ↗Submit #856011 | Tenda BE12 Pro V16.03.66.23 Stack-based Buffer Overflow — BE12 Pro (vuldb.com) ↗

CVSS 8.7 (v4.0)

BE12 Pro

Tenda BE12 Pro SafeUrlFilter fromSafeUrlFilter stack-based overflow

CVE-2026-15692

Affected firmware
16.03.66.23
Fix
Fix details in the linked record
Read VulDB CVE record
Details and sources

A weakness has been identified in Tenda BE12 Pro 16.03.66.23. This vulnerability affects the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

VDB-378239 | Tenda BE12 Pro SafeUrlFilter fromSafeUrlFilter stack-based overflow — BE12 Pro (vuldb.com) ↗VDB-378239 | CTI Indicators (IOB, IOC, IOA) — BE12 Pro (vuldb.com) ↗CVE-2026-15692 | CVE Analysis and Report — BE12 Pro (vuldb.com) ↗Submit #856010 | Tenda BE12 Pro V16.03.66.23 Stack-based Buffer Overflow — BE12 Pro (vuldb.com) ↗
Check more security advisories for this device · CVE.org