CVE-2026-7030
A security vulnerability has been detected in Tenda F456 1.0.0.5. This affects the function fromRouteStatic of the file /goform/RouteStatic. The manipulation of the argument page leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
View on NVDAnalysis
This vulnerability affects specific firmware for the Tenda F456 consumer router, allowing a remote buffer overflow via a web form. As vendor-specific firmware for a low-end consumer device, it falls outside the professional focus of software developers and system administrators in this community. Such router-specific bugs are generally considered noise for this audience.
Severity
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCWE-119CWE-120EPSS
Affects
tenda:f456_firmwaretenda:f456Technical description
A security vulnerability has been detected in Tenda F456 1.0.0.5. This affects the function fromRouteStatic of the file /goform/RouteStatic. The manipulation of the argument page leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.