Which versions of Tenda FH1202 are affected by CVE-2026-7035?

CVE-2026-7035 is a stack-based buffer overflow in Tenda FH1202 router firmware version 1.2.0.14 that allows authenticated users to execute arbitrary code, potentially giving attackers full control of…

Is there a public PoC exploit available for CVE-2026-7035?

Yes, a public proof-of-concept exploit is available for CVE-2026-7035. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-7035?

Within 24 hours: Inventory all Tenda FH1202 devices and verify firmware versions in use; isolate any devices running version 1.2.0.14 to a restricted VLAN with no access to critical systems. Within 7 days: Contact Tenda support to confirm patch availability timeline; implement strong administrative access controls (unique complex passwords, restrict admin access by IP whitelist). Within 30 days: Either apply a vendor-released patch once available or decommission affected devices and replace with alternative router models that receive active security maintenance.

Tenda FH1202 CVE-2026-7035

Q: What is the CVSS score of CVE-2026-7035?

CVE-2026-7035 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-25711 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-04-26 VulDB

Buffer Overflow Tenda Stack Overflow

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

PoC Detected

Apr 30, 2026 - 14:10 vuln.today

Public exploit code

Analysis Updated

Apr 26, 2026 - 12:27 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Apr 26, 2026 - 12:22 vuln.today

cvss_changed

CVSS changed

Apr 26, 2026 - 12:22 NVD

8.8 (HIGH) 7.4 (HIGH)

Analysis Generated

Apr 26, 2026 - 11:45 vuln.today

EUVD ID Assigned

Apr 26, 2026 - 11:30 euvd

EUVD-2026-25711

Analysis Generated

Apr 26, 2026 - 11:30 vuln.today

CVE Published

Apr 26, 2026 - 11:15 nvd

HIGH 7.4

DescriptionCVE.org

A vulnerability was determined in Tenda FH1202 1.2.0.14. This affects the function fromWrlclientSet of the file /goform/WrlclientSet of the component httpd. Executing a manipulation of the argument Go can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

AnalysisAI

Stack-based buffer overflow in Tenda FH1202 router firmware 1.2.0.14 allows authenticated remote attackers to execute arbitrary code via crafted HTTP requests to the /goform/WrlclientSet endpoint. The vulnerability resides in the fromWrlclientSet function of the httpd component, triggered by malicious 'Go' parameter input. Publicly available proof-of-concept exploit code increases immediate exploitation risk for exposed devices. EPSS data not provided, but public POC and low attack complexity (AC:L) indicate elevated real-world risk despite authentication requirement (PR:L).

Technical ContextAI

The vulnerability affects the httpd web server component in Tenda FH1202 wireless router firmware version 1.2.0.14 (CPE: cpe:2.3:a:tenda:fh1202:*:*:*:*:*:*:*:*). The flaw is a CWE-121 stack-based buffer overflow in the fromWrlclientSet function handling the /goform/WrlclientSet endpoint. When processing HTTP requests, the function fails to properly validate the length of the 'Go' parameter before copying it to a fixed-size stack buffer. This classic memory corruption vulnerability allows an attacker to overwrite adjacent stack memory, including return addresses and function pointers, enabling control of program execution flow. Stack-based overflows in embedded device web interfaces are particularly dangerous because they often run with root privileges and lack modern exploit mitigations like ASLR or stack canaries common in general-purpose operating systems.

RemediationAI

Check Tenda's official support portal (https://www.tenda.com.cn/) for firmware updates addressing CVE-2026-7035, though no vendor-released patch is confirmed in available data as of this analysis. If updated firmware becomes available, upgrade immediately following manufacturer instructions and verify the new version number differs from 1.2.0.14. As immediate compensating controls: (1) Restrict access to the router's web management interface by disabling remote administration features entirely if not required - this eliminates the network attack vector for most deployments; (2) If remote management is necessary, implement firewall rules or VPN access requirements so only trusted IP ranges can reach the web interface on ports 80/443; (3) Change default administrative credentials to strong, unique passwords (16+ characters) to raise the authentication barrier, though this only delays exploitation rather than preventing it; (4) Monitor router logs for unusual /goform/ POST requests or unexpected reboots indicating exploitation attempts. Note that disabling remote management may impact legitimate remote support workflows, and credential changes must be coordinated with all authorized administrators. These mitigations reduce attack surface but do not eliminate the underlying vulnerability - patching remains the definitive solution once available.