<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>CVE-2026-5046 — CraftedSignal Threat Feed</title><link>https://feed.craftedsignal.io/tags/cve-2026-5046/</link><description>Trending threats, MITRE ATT&amp;CK coverage, and detection metadata — refreshed continuously.</description><generator>Hugo</generator><language>en</language><managingEditor>hello@craftedsignal.io</managingEditor><webMaster>hello@craftedsignal.io</webMaster><lastBuildDate>Sun, 29 Mar 2026 15:16:36 +0000</lastBuildDate><atom:link href="https://feed.craftedsignal.io/tags/cve-2026-5046/feed.xml" rel="self" type="application/rss+xml"/><item><title>Tenda FH1201 Stack-Based Buffer Overflow Vulnerability (CVE-2026-5046)</title><link>https://feed.craftedsignal.io/briefs/2026-03-tenda-overflow/</link><pubDate>Sun, 29 Mar 2026 15:16:36 +0000</pubDate><author>hello@craftedsignal.io</author><guid isPermaLink="true">https://feed.craftedsignal.io/briefs/2026-03-tenda-overflow/</guid><description>A stack-based buffer overflow vulnerability (CVE-2026-5046) in Tenda FH1201 version 1.2.0.14(408) allows remote attackers to execute arbitrary code by manipulating the GO argument in the formWrlExtraSet function of the /goform/WrlExtraSet component.</description><content:encoded><![CDATA[<p>CVE-2026-5046 is a stack-based buffer overflow vulnerability affecting Tenda FH1201 routers running firmware version 1.2.0.14(408). The vulnerability resides within the <code>formWrlExtraSet</code> function of the <code>/goform/WrlExtraSet</code> component, specifically in the handling of the <code>GO</code> argument. A remote attacker can exploit this flaw by sending a crafted HTTP request with a maliciously oversized <code>GO</code> parameter, overwriting the stack and potentially gaining arbitrary code execution on the device. The…</p>
]]></content:encoded><category domain="severity">critical</category><category domain="type">advisory</category><category>CVE-2026-5046</category><category>tenda</category><category>buffer-overflow</category><category>router</category></item></channel></rss>