Which versions of Tenda F456 are affected by CVE-2026-7080?

Tenda F456 routers running firmware 1.0.0.5 contain a high-severity buffer overflow in the PPTP management interface that enables authenticated attackers to fully compromise affected devices.

Is there a public PoC exploit available for CVE-2026-7080?

Yes, a public proof-of-concept exploit is available for CVE-2026-7080. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-7080?

Within 24 hours: Identify all Tenda F456 routers in your environment and document firmware versions via admin interface or network scanning. Within 7 days: Restrict administrative access to PPTP configuration to trusted networks only; disable PPTP management remotely if not actively required. Within 30 days: Contact Tenda support for firmware update availability; if no patch releases, evaluate router replacement or network segmentation to isolate PPTP traffic.

Tenda F456 CVE-2026-7080

Q: What is the CVSS score of CVE-2026-7080?

CVE-2026-7080 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-25763 HIGH

Classic Buffer Overflow (CWE-120)

2026-04-27 VulDB

Buffer Overflow Tenda

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

PoC Detected

Apr 30, 2026 - 14:35 vuln.today

Public exploit code

Re-analysis Queued

Apr 27, 2026 - 19:07 vuln.today

cvss_changed

Analysis Generated

Apr 27, 2026 - 03:31 vuln.today

CVSS changed

Apr 27, 2026 - 03:22 NVD

8.8 (HIGH) 7.4 (HIGH)

EUVD ID Assigned

Apr 27, 2026 - 03:00 euvd

EUVD-2026-25763

Analysis Generated

Apr 27, 2026 - 03:00 vuln.today

CVE Published

Apr 27, 2026 - 02:45 nvd

HIGH 7.4

DescriptionCVE.org

A security vulnerability has been detected in Tenda F456 1.0.0.5. This impacts the function fromPPTPUserSetting of the file /goform/PPTPUserSetting of the component httpd. Such manipulation of the argument delno leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

AnalysisAI

Buffer overflow in Tenda F456 router firmware 1.0.0.5 allows authenticated remote attackers to achieve full device compromise through the PPTP user management interface. The vulnerability exists in the fromPPTPUserSetting function within the httpd component, exploitable via manipulation of the 'delno' parameter sent to /goform/PPTPUserSetting. Public exploit code is available on GitHub, significantly lowering the barrier to exploitation, though no CISA KEV listing or widespread exploitation has been confirmed at time of analysis.

Technical ContextAI

The vulnerability affects the httpd web server component of Tenda F456 router firmware version 1.0.0.5 (CPE: cpe:2.3:a:tenda:f456:*:*:*:*:*:*:*:*). This is a classic stack-based or heap-based buffer overflow (CWE-120) in the PPTP user configuration handler. The fromPPTPUserSetting function fails to properly validate the length of the 'delno' parameter before copying it into a fixed-size buffer. PPTP (Point-to-Point Tunneling Protocol) is a VPN protocol commonly implemented in consumer routers, and this vulnerability specifically affects the user management functionality accessed via the web administration interface at the /goform/PPTPUserSetting endpoint. The httpd component runs with elevated privileges on embedded router platforms, making memory corruption vulnerabilities particularly severe.

RemediationAI

No vendor-released security patch or firmware update has been identified in the provided references at time of analysis. The Tenda corporate website (https://www.tenda.com.cn/) should be monitored for firmware updates addressing CVE-2026-7080. Until a patch is available, implement these specific compensating controls: (1) Disable remote management access to the router's web interface - restrict administrative access to local LAN only by disabling WAN-side management in router settings, which prevents remote exploitation but eliminates legitimate remote administration capability; (2) Change default administrative credentials to strong, unique passwords (16+ characters, mixed case, numbers, symbols) to raise the authentication barrier, though this only mitigates the PR:L requirement and does not eliminate the vulnerability; (3) If PPTP VPN functionality is not required for business operations, disable the PPTP server entirely through the router configuration interface to remove the vulnerable attack surface, with the trade-off of losing PPTP-based remote access; (4) Deploy network segmentation to isolate the vulnerable router from critical internal resources, limiting post-exploitation impact. For organizations requiring secure remote access, consider replacing the affected Tenda F456 device with enterprise-grade routing equipment from vendors with established security update processes.