Skip to main content

Tenda F456 CVE-2026-7078

| EUVD-2026-25761 HIGH
Classic Buffer Overflow (CWE-120)
2026-04-27 VulDB
Buffer Overflow Tenda
7.4
CVSS 4.0
Share

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

7
PoC Detected
Apr 30, 2026 - 14:38 vuln.today
Public exploit code
Re-analysis Queued
Apr 27, 2026 - 19:07 vuln.today
cvss_changed
Analysis Generated
Apr 27, 2026 - 03:30 vuln.today
CVSS changed
Apr 27, 2026 - 03:22 NVD
8.8 (HIGH) 7.4 (HIGH)
EUVD ID Assigned
Apr 27, 2026 - 03:00 euvd
EUVD-2026-25761
Analysis Generated
Apr 27, 2026 - 03:00 vuln.today
CVE Published
Apr 27, 2026 - 02:15 nvd
HIGH 7.4

DescriptionNVD

A security flaw has been discovered in Tenda F456 1.0.0.5. The impacted element is the function fromSetIpBind of the file /goform/SetIpBind of the component httpd. The manipulation of the argument page results in buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

AnalysisAI

Buffer overflow in Tenda F456 router version 1.0.0.5 allows authenticated remote attackers to achieve arbitrary code execution with high impact to confidentiality, integrity, and availability. The vulnerability resides in the fromSetIpBind function of the httpd daemon's /goform/SetIpBind endpoint, exploitable via malformed 'page' parameter input. …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: Identify all Tenda F456 routers in your environment using inventory or network scanning and document firmware versions. Within 7 days: Check Tenda's official website for any available firmware updates beyond version 1.0.0.5 and test in a non-production environment; if no patch is available, implement the compensating controls listed below. …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Share

CVE-2026-7078 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy