Which versions of Tenda are affected by CVE-2026-6198?

A stack-based buffer overflow in Tenda F456 router firmware v1.0.0.5 allows authenticated attackers to execute arbitrary code on affected devices, creating potential for network compromise and…

Is there a public PoC exploit available for CVE-2026-6198?

Yes, a public proof-of-concept exploit is available for CVE-2026-6198. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-6198?

Within 24 hours: Identify all Tenda F456 routers running v1.0.0.5 in your network and document their network position and criticality. Within 7 days: Implement network segmentation to restrict administrative access to affected routers to authorized personnel only; disable remote management if not required; and check Tenda support channels for firmware updates. Within 30 days: Evaluate replacement options or alternative router solutions; monitor for vendor security advisories; and maintain heightened logging on affected devices for anomalous access patterns.

Tenda CVE-2026-6198

Q: What is the CVSS score of CVE-2026-6198?

CVE-2026-6198 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-22058 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-04-13 VulDB

GHSA-xr22-3p6x-xw4f

Stack Overflow Buffer Overflow Tenda

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 22, 2026 - 20:37 vuln.today

cvss_changed

PoC Detected

Apr 22, 2026 - 20:23 vuln.today

Public exploit code

Analysis Generated

Apr 15, 2026 - 12:33 vuln.today

CVSS changed

Apr 13, 2026 - 19:37 NVD

8.8 (HIGH) 7.4 (HIGH)

EUVD ID Assigned

Apr 13, 2026 - 18:56 euvd

EUVD-2026-22058

Analysis Generated

Apr 13, 2026 - 18:56 vuln.today

CVE Published

Apr 13, 2026 - 18:15 nvd

HIGH 7.4

DescriptionCVE.org

A vulnerability has been found in Tenda F456 1.0.0.5. This issue affects the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

Stack-based buffer overflow in Tenda F456 router firmware v1.0.0.5 allows authenticated remote attackers to achieve code execution with high integrity and availability impact via crafted 'page' parameter to the /goform/NatStaticSetting endpoint's fromNatStaticSetting function. Public exploit code exists (EPSS 0.05%, 14th percentile), indicating low observed exploitation probability despite proof-of-concept availability. No active exploitation confirmed via CISA KEV at time of analysis.

Technical ContextAI

This vulnerability affects the NAT static port mapping configuration interface in Tenda F456 wireless routers running firmware version 1.0.0.5. The fromNatStaticSetting function in the /goform/NatStaticSetting handler fails to properly validate the length of the 'page' parameter before copying it to a fixed-size stack buffer, resulting in CWE-121 (stack-based buffer overflow). Stack overflows in embedded device web interfaces are particularly dangerous as they typically run with root/administrative privileges and can overwrite return addresses to redirect execution flow. The CPE identifier cpe:2.3:a:tenda:f456:*:*:*:*:*:*:*:* confirms this affects the application layer of the F456 router product line. CVSS 4.0 metrics indicate network-accessible attack vector with low complexity, requiring only low-privilege authenticated access to the web management interface.

RemediationAI

No vendor-released patch identified at time of analysis; Tenda has not published a security advisory or firmware update addressing CVE-2026-6198 for the F456 model. Organizations should immediately implement compensating controls: restrict management interface access to trusted internal networks only by disabling WAN-side administration, implement strong non-default administrative credentials, and deploy network segmentation to isolate affected routers from critical assets. Monitor Tenda's official support portal at https://www.tenda.com.cn/ for future firmware releases addressing this vulnerability. For high-security environments, consider replacing affected devices with alternative router models from vendors with established security patch programs. If administrative access from untrusted networks is absolutely required, deploy VPN access rather than exposing the web interface directly. Refer to VulDB advisory https://vuldb.com/vuln/357120 and NVD entry https://nvd.nist.gov/vuln/detail/CVE-2026-6198 for ongoing updates.