Which versions of Tenda F456 are affected by CVE-2026-7031?

Tenda F456 routers running version 1.0.0.5 contain a buffer overflow vulnerability that allows authenticated attackers to completely compromise the device through malicious HTTP requests.

Is there a public PoC exploit available for CVE-2026-7031?

Yes, a public proof-of-concept exploit is available for CVE-2026-7031. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-7031?

Within 24 hours: Identify all Tenda F456 devices in your environment and document firmware versions. Within 7 days: Restrict access to affected routers (disable remote management, limit admin account privileges, implement network segmentation). Within 30 days: Contact Tenda support for patch availability timeline; prepare for firmware upgrade or device replacement if no patch is released within 60 days.

Tenda F456 CVE-2026-7031

Q: What is the CVSS score of CVE-2026-7031?

CVE-2026-7031 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-25706 HIGH

Classic Buffer Overflow (CWE-120)

2026-04-26 VulDB

Buffer Overflow Tenda

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

PoC Detected

Apr 29, 2026 - 18:29 vuln.today

Public exploit code

Re-analysis Queued

Apr 27, 2026 - 19:07 vuln.today

cvss_changed

Analysis Generated

Apr 26, 2026 - 10:30 vuln.today

CVSS changed

Apr 26, 2026 - 10:22 NVD

8.8 (HIGH) 7.4 (HIGH)

EUVD ID Assigned

Apr 26, 2026 - 10:15 euvd

EUVD-2026-25706

Analysis Generated

Apr 26, 2026 - 10:15 vuln.today

CVE Published

Apr 26, 2026 - 09:45 nvd

HIGH 7.4

DescriptionCVE.org

A vulnerability was detected in Tenda F456 1.0.0.5. This impacts the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the argument page results in buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.

AnalysisAI

Buffer overflow in Tenda F456 router version 1.0.0.5 allows authenticated remote attackers to achieve complete device compromise via crafted HTTP requests to the /goform/SafeMacFilter endpoint. The vulnerability resides in the fromSafeMacFilter function's improper validation of the 'page' parameter. Public exploit code is available on GitHub, significantly lowering the technical barrier for exploitation. CVSS 7.4 (High) reflects the network attack vector and high impact across confidentiality, integrity, and availability, though exploitation requires low-privilege authentication.

Technical ContextAI

This vulnerability affects the web management interface of Tenda F456 wireless routers running firmware version 1.0.0.5. The flaw is a classic stack-based or heap-based buffer overflow (CWE-120) in the fromSafeMacFilter function, which processes MAC address filtering configuration requests submitted to the /goform/SafeMacFilter endpoint. When the 'page' parameter contains excessive data, the function fails to perform adequate bounds checking before copying input into a fixed-size buffer, allowing memory corruption. This type of vulnerability is common in embedded device firmware written in C/C++ without modern memory protection. The CPE identifier cpe:2.3:a:tenda:f456:*:*:*:*:*:*:*:* confirms this affects Tenda F456 router firmware. Router web interfaces often run with elevated privileges, making memory corruption vulnerabilities particularly dangerous as they can lead to complete device takeover.

RemediationAI

No vendor-released patch has been identified at the time of analysis. Check the official Tenda support portal (https://www.tenda.com.cn/) for firmware updates newer than version 1.0.0.5 for the F456 model. Until a patch is available, implement these compensating controls: (1) Change default administrative credentials to strong, unique passwords immediately - this is the most critical mitigation as PR:L requirement means exploitation depends on credential access. (2) Disable remote administration features and restrict web interface access to trusted local network segments only, blocking WAN-side access to the management interface (typically TCP ports 80/443). This eliminates the network attack vector for external threats but does not protect against LAN-based attackers. (3) Place the router behind a more secure perimeter device if feasible, though this may not be practical for residential deployments. (4) Monitor device logs for unusual administrative access patterns or unexpected configuration changes to SafeMacFilter settings. Note that disabling MAC filtering functionality entirely may eliminate the attack surface but removes a security feature. Given Tenda's historical slow patch response for end-of-life consumer devices, consider replacing the F456 with a currently-supported router model from vendors with active security update programs if this device processes sensitive traffic.