Which versions of Tenda are affected by CVE-2026-6200?

Tenda F456 routers running firmware 1.0.0.5 contain a stack-based buffer overflow in the web management interface that allows authenticated attackers to execute arbitrary code, potentially…

Is there a public PoC exploit available for CVE-2026-6200?

Yes, a public proof-of-concept exploit is available for CVE-2026-6200. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-6200?

Within 24 hours: Identify all Tenda F456 1.0.0.5 routers in your environment using network inventory tools; isolate affected devices from production networks if possible. Within 7 days: Contact Tenda for firmware update availability and evaluate alternative router models if no patch timeline is provided; restrict administrative access to the router's web interface to trusted IP addresses only. Within 30 days: Deploy replacement routers or apply vendor-released firmware update immediately upon availability; implement network segmentation to limit lateral movement from compromised router devices.

Tenda CVE-2026-6200

Q: What is the CVSS score of CVE-2026-6200?

CVE-2026-6200 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-22065 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-04-13 VulDB

GHSA-g92h-vg4v-w46f

Stack Overflow Buffer Overflow Tenda

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 22, 2026 - 20:37 vuln.today

cvss_changed

PoC Detected

Apr 22, 2026 - 20:23 vuln.today

Public exploit code

Analysis Generated

Apr 15, 2026 - 12:34 vuln.today

CVSS changed

Apr 13, 2026 - 19:37 NVD

8.8 (HIGH) 7.4 (HIGH)

EUVD ID Assigned

Apr 13, 2026 - 18:56 euvd

EUVD-2026-22065

Analysis Generated

Apr 13, 2026 - 18:56 vuln.today

CVE Published

Apr 13, 2026 - 18:45 nvd

HIGH 7.4

DescriptionCVE.org

A vulnerability was determined in Tenda F456 1.0.0.5. The affected element is the function formwebtypelibrary of the file /goform/webtypelibrary. This manipulation of the argument menufacturer/Go causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

AnalysisAI

Stack-based buffer overflow in Tenda F456 1.0.0.5 router's formwebtypelibrary function allows authenticated remote attackers to achieve arbitrary code execution with high impact to confidentiality, integrity, and availability. The vulnerability resides in /goform/webtypelibrary endpoint via manipulation of the 'menufacturer' or 'Go' parameters. Public exploit code exists on GitHub (EPSS 0.05%, 14th percentile), indicating low likelihood of mass exploitation but confirmed weaponization capability. No vendor patch identified at time of analysis.

Technical ContextAI

This vulnerability affects the Tenda F456 wireless router firmware version 1.0.0.5, specifically within the web management interface's formwebtypelibrary function that handles the /goform/webtypelibrary endpoint. The flaw is classified as CWE-121 (Stack-based Buffer Overflow), a memory corruption vulnerability where unchecked input to the 'menufacturer' or 'Go' parameters exceeds allocated stack buffer boundaries. In embedded router firmware, web interface handlers often use fixed-size stack buffers for parameter processing without adequate bounds checking. When oversized input is provided to these parameters, adjacent memory regions on the stack are overwritten, potentially including return addresses and function pointers, enabling arbitrary code execution in the context of the web server process (typically running with elevated privileges on consumer routers). The CPE identifier cpe:2.3:a:tenda:f456 confirms this as an application-layer vulnerability in Tenda's proprietary firmware.

RemediationAI

No vendor-released patch identified at time of analysis-Tenda has not published firmware updates or security advisories addressing CVE-2026-6200 per available references. Organizations and home users should implement compensating controls: (1) Change default administrative credentials to strong, unique passwords immediately to raise the authentication barrier (PR:L requirement); (2) Disable remote management features and restrict web interface access to trusted internal networks only, blocking WAN-side administration; (3) Place affected routers behind additional network segmentation or replace with actively maintained hardware from vendors with established security update programs; (4) Monitor Tenda's support portal (https://www.tenda.com.cn/) and VulDB advisory (https://vuldb.com/vuln/357122) for future patch availability. Given Tenda's inconsistent patch release history for legacy consumer devices, hardware replacement may be the most viable long-term remediation for production environments.