Skip to content
CVSS 8.8 · HIGH

CVE-2026-7032

A flaw has been found in Tenda F456 1.0.0.5. Affected is the function SafeEmailFilter of the file /goform/SafeEmailFilter. This manipulation of the argument page causes buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.

View on NVD

Analysis

This vulnerability affects the Tenda F456 router and allows for a remote buffer overflow. While the severity is high, the target is vendor-specific consumer hardware that is not relevant to software development or professional infrastructure.

Severity

Score: 8.8(HIGH)
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AV: NETWORK
AC: LOW
PR: LOW
UI: NONE
S: UNCHANGED
C: HIGH
I: HIGH
A: HIGH
Weakness (CWE): CWE-119CWE-120

EPSS

Probability of exploitation (next 30 days): 0.0008 (0.1%)
Percentile: 23.2%
EPSS: 2026-05-06

Affects

tenda:f456_firmwaretenda:f456

Technical description

A flaw has been found in Tenda F456 1.0.0.5. Affected is the function SafeEmailFilter of the file /goform/SafeEmailFilter. This manipulation of the argument page causes buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.

Published: 4/26/2026, 11:16:06 AM
Last modified: 4/29/2026, 6:26:45 PM

References

HomeEventsBlogResourcesTeam