Skip to content
CVSS 8.8 · HIGH

CVE-2026-7079

A weakness has been identified in Tenda F456 1.0.0.5. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component httpd. This manipulation of the argument wanmode causes buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.

View on NVD

Analysis

The vulnerability affects Tenda F456 router firmware, allowing a remote buffer overflow via the web interface. This is vendor-specific consumer hardware that is not relevant to the MexicoDev community's focus on software development stacks and server infrastructure.

Severity

Score: 8.8(HIGH)
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AV: NETWORK
AC: LOW
PR: LOW
UI: NONE
S: UNCHANGED
C: HIGH
I: HIGH
A: HIGH
Weakness (CWE): CWE-119CWE-120

EPSS

Probability of exploitation (next 30 days): 0.0008 (0.1%)
Percentile: 23.2%
EPSS: 2026-05-06

Affects

tenda:f456_firmwaretenda:f456

Technical description

A weakness has been identified in Tenda F456 1.0.0.5. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component httpd. This manipulation of the argument wanmode causes buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.

Published: 4/27/2026, 3:15:59 AM
Last modified: 4/30/2026, 2:37:06 PM

References

HomeEventsBlogResourcesTeam