Which versions of Tenda are affected by CVE-2026-6197?

CVE-2026-6197 affects Tenda F456 routers running firmware 1.0.0.5, enabling authenticated attackers to execute arbitrary code and gain complete system control through buffer overflow in wireless…

Is there a public PoC exploit available for CVE-2026-6197?

Yes, a public proof-of-concept exploit is available for CVE-2026-6197. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-6197?

Within 24 hours: Identify and inventory all Tenda F456 routers running firmware 1.0.0.5 in your network using device management or asset discovery tools. Within 7 days: Check Tenda vendor advisory for firmware updates beyond 1.0.0.5; if available, plan upgrade rollout; if unavailable, implement compensating controls below. Within 30 days: Complete firmware upgrade on all affected devices to the latest available version, or document risk acceptance with executive approval if no patch exists.

Tenda CVE-2026-6197

Q: What is the CVSS score of CVE-2026-6197?

CVE-2026-6197 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-22057 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-04-13 VulDB

GHSA-6xp6-q5rv-82xp

Stack Overflow Buffer Overflow Tenda

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 22, 2026 - 20:37 vuln.today

cvss_changed

PoC Detected

Apr 22, 2026 - 20:23 vuln.today

Public exploit code

Analysis Generated

Apr 15, 2026 - 12:32 vuln.today

CVSS changed

Apr 13, 2026 - 19:37 NVD

8.8 (HIGH) 7.4 (HIGH)

EUVD ID Assigned

Apr 13, 2026 - 18:56 euvd

EUVD-2026-22057

Analysis Generated

Apr 13, 2026 - 18:56 vuln.today

CVE Published

Apr 13, 2026 - 18:00 nvd

HIGH 7.4

DescriptionCVE.org

A flaw has been found in Tenda F456 1.0.0.5. This vulnerability affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset. Executing a manipulation of the argument mit_ssid can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used.

AnalysisAI

Stack-based buffer overflow in Tenda F456 router firmware version 1.0.0.5 allows authenticated remote attackers to achieve complete system compromise via crafted input to the wireless security settings handler. Public exploit code is available, but EPSS exploitation probability remains very low (0.05%, 14th percentile), and no active exploitation has been reported. The vulnerability requires authenticated access to the router's administrative interface, limiting opportunistic exploitation.

Technical ContextAI

The vulnerability resides in the formWrlsafeset function within the /goform/AdvSetWrlsafeset endpoint of Tenda F456 router firmware. This endpoint handles wireless security configuration, specifically processing SSID-related parameters. The flaw is a classic stack-based buffer overflow (CWE-121) triggered by insufficient bounds checking on the 'mit_ssid' parameter. When oversized input is provided, it overwrites adjacent stack memory, potentially corrupting return addresses or function pointers. The affected product is identified by CPE cpe:2.3:a:tenda:f456:*:*:*:*:*:*:*:*, specifically version 1.0.0.5. Stack-based buffer overflows in embedded device web interfaces are particularly dangerous because they often run with elevated privileges and lack modern exploit mitigations like ASLR or stack canaries commonly found in desktop operating systems.

RemediationAI

Organizations using Tenda F456 routers should immediately check firmware versions and contact Tenda support for updated firmware releases addressing CVE-2026-6197. No vendor-released patch version has been independently confirmed in available intelligence at time of analysis. As an interim mitigation, restrict administrative access to the router's web interface to trusted management networks only, disable remote administration features if enabled, enforce strong non-default administrative credentials, and monitor access logs for suspicious authentication attempts or unusual wireless configuration changes. Consider replacing affected devices with alternative router models if Tenda does not release timely security updates. Vendor advisory resources are available at https://www.tenda.com.cn/ and technical details can be reviewed at https://vuldb.com/vuln/357119.