CVSS 6.3 · MEDIUM
CVE-2026-7102
A vulnerability was found in Tenda F456 1.0.0.5. This impacts the function FromWriteFacMac of the file /goform/WriteFacMac of the component httpd. The manipulation of the argument mac results in command injection. The attack can be executed remotely. The exploit has been made public and could be used.
View on NVDSeverity
Score: 6.3(MEDIUM)
Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LAV: NETWORK
AC: LOW
PR: LOW
UI: NONE
S: UNCHANGED
C: LOW
I: LOW
A: LOW
Weakness (CWE):
CWE-74CWE-77EPSS
Probability of exploitation (next 30 days): 0.0084 (0.8%)
Percentile: 74.8%
EPSS: 2026-05-06
Affects
tenda:f456_firmwaretenda:f456Technical description
A vulnerability was found in Tenda F456 1.0.0.5. This impacts the function FromWriteFacMac of the file /goform/WriteFacMac of the component httpd. The manipulation of the argument mac results in command injection. The attack can be executed remotely. The exploit has been made public and could be used.
Published: 4/27/2026, 9:16:02 AM
Last modified: 4/29/2026, 5:41:47 PM