Is there a public PoC exploit available for CVE-2026-6196?

Yes, a public proof-of-concept exploit is available for CVE-2026-6196. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-6196?

Within 24 hours: Identify and inventory all Tenda F456 routers running firmware 1.0.0.5 in your network environment. Within 7 days: Implement network segmentation and access controls to restrict administrative access to affected devices; disable remote management features where feasible and enforce strong authentication on remaining administrative access. Within 30 days: Monitor vendor advisories for patch availability and establish a firmware update plan; evaluate replacement with alternative router models if patching timeline extends beyond 60 days.

Tenda CVE-2026-6196

Q: What is the CVSS score of CVE-2026-6196?

CVE-2026-6196 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-22055 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-04-13 VulDB

GHSA-w9xg-4wh5-v94m

Stack Overflow Buffer Overflow Tenda

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 22, 2026 - 20:37 vuln.today

cvss_changed

PoC Detected

Apr 22, 2026 - 20:23 vuln.today

Public exploit code

Analysis Generated

Apr 15, 2026 - 12:31 vuln.today

CVSS changed

Apr 13, 2026 - 18:22 NVD

8.8 (HIGH) 7.4 (HIGH)

EUVD ID Assigned

Apr 13, 2026 - 18:00 euvd

EUVD-2026-22055

Analysis Generated

Apr 13, 2026 - 18:00 vuln.today

CVE Published

Apr 13, 2026 - 17:45 nvd

HIGH 7.4

DescriptionCVE.org

A vulnerability was detected in Tenda F456 1.0.0.5. This affects the function fromexeCommand of the file /goform/exeCommand. Performing a manipulation of the argument cmdinput results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.

AnalysisAI

Stack-based buffer overflow in Tenda F456 router firmware 1.0.0.5 allows authenticated remote attackers to execute arbitrary code via the /goform/exeCommand endpoint. The vulnerability has a publicly available proof-of-concept exploit and affects the fromexeCommand function through manipulation of the cmdinput parameter. EPSS probability is low (0.05%, 14th percentile), indicating minimal observed exploitation activity despite POC availability. Not listed in CISA KEV, confirming no widespread active exploitation detected.

Technical ContextAI

This is a classic stack-based buffer overflow (CWE-121) in embedded router firmware web interface. The Tenda F456 router's web management interface includes a /goform/exeCommand endpoint that processes commands via the fromexeCommand function. The cmdinput parameter lacks proper bounds checking before copying data to a fixed-size stack buffer, allowing an attacker to overflow the buffer with oversized input. Stack-based overflows in router firmware typically affect HTTP request handlers written in C/C++ without modern memory protection. The CPE identifier (cpe:2.3:a:tenda:f456:*:*:*:*:*:*:*:*) confirms this affects the Tenda F456 wireless router application firmware. Unlike heap overflows, stack overflows can directly overwrite return addresses and function pointers, making code execution more straightforward for attackers with knowledge of the device architecture.

RemediationAI

No vendor-released patch identified at time of analysis for Tenda F456 firmware 1.0.0.5. Users should monitor the official Tenda security advisories at https://www.tenda.com.cn/ for firmware updates addressing CVE-2026-6196. As an interim mitigation, restrict administrative access to the router web interface to trusted IP addresses only, use strong unique credentials for router administration, and disable remote management features if not required. Consider network segmentation to isolate the vulnerable device from critical network segments. For enterprise environments, evaluate replacing the affected device with router models from vendors with established security update programs. Additional technical details and exploit code are documented at https://github.com/Litengzheng/vuldb_new/blob/main/F456/vul_113/README.md for security testing purposes.