Which versions of Tenda F456 are affected by CVE-2026-7056?

A buffer overflow in Tenda F456 router firmware (version 1.0.0.5) enables authenticated attackers to execute arbitrary code, creating a direct threat to network perimeter security and potentially…

Is there a public PoC exploit available for CVE-2026-7056?

Yes, a public proof-of-concept exploit is available for CVE-2026-7056. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-7056?

Within 24 hours: inventory all Tenda F456 routers in production and identify firmware version. Within 7 days: contact Tenda support to confirm patch availability timeline and assess whether affected devices can be isolated or decommissioned. Within 30 days: if no patch is released, implement compensating controls (network segmentation, WAN-only admin access restrictions, disable SafeUrlFilter if operationally feasible) or plan replacement with patched firmware version or alternative router.

Tenda F456 CVE-2026-7056

Q: What is the CVSS score of CVE-2026-7056?

CVE-2026-7056 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-25726 HIGH

Classic Buffer Overflow (CWE-120)

2026-04-26 VulDB

Buffer Overflow Tenda

7.4

CVSS 4.0

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

PoC Detected

Apr 29, 2026 - 22:18 vuln.today

Public exploit code

Analysis Updated

Apr 26, 2026 - 22:28 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Apr 26, 2026 - 22:22 vuln.today

cvss_changed

CVSS changed

Apr 26, 2026 - 22:22 NVD

8.8 (HIGH) 7.4 (HIGH)

Analysis Generated

Apr 26, 2026 - 19:15 vuln.today

EUVD ID Assigned

Apr 26, 2026 - 18:45 euvd

EUVD-2026-25726

Analysis Generated

Apr 26, 2026 - 18:45 vuln.today

CVE Published

Apr 26, 2026 - 18:30 nvd

HIGH 7.4

DescriptionNVD

A vulnerability was detected in Tenda F456 1.0.0.5. Impacted is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter of the component httpd. The manipulation of the argument page results in buffer overflow. The attack may be performed from remote. The exploit is now public and may be used.

AnalysisAI

Buffer overflow in Tenda F456 router firmware 1.0.0.5 allows authenticated remote attackers to achieve arbitrary code execution with high impact to confidentiality, integrity, and availability. The vulnerability resides in the SafeUrlFilter functionality of the httpd web server component, triggered by manipulating the 'page' parameter. …

RemediationAI

Within 24 hours: inventory all Tenda F456 routers in production and identify firmware version. Within 7 days: contact Tenda support to confirm patch availability timeline and assess whether affected devices can be isolated or decommissioned. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

CVE-2026-7056 vulnerability details – vuln.today

Back

Tenda F456 CVE-2026-7056

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

RemediationAI

Analysis

Full analysis requires sign-in

Share

Tenda F456 CVE-2026-7056

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

RemediationAI

Full analysis requires sign-in

Share

External POC / Exploit Code