Which versions of Tenda F456 are affected by CVE-2026-7081?

CVE-2026-7081 is a high-severity remote code execution vulnerability affecting Tenda F456 routers (version 1.0.0.5) that allows authenticated attackers to completely compromise the device through a…

How to fix or mitigate CVE-2026-7081?

Within 24 hours: Inventory all Tenda F456 1.0.0.5 devices in production and isolate affected units from critical network segments if feasible. Within 7 days: Contact Tenda for patch status confirmation and escalation; implement network segmentation to restrict HTTP access to the /goform/GstDhcpSetSer endpoint via firewall rules. Within 30 days: Deploy replacement routers from alternative vendors or await vendor-released patch; if retention is mandatory, enforce strong authentication at network perimeter and continuous monitoring for exploitation attempts.

Tenda F456 CVE-2026-7081

Q: What is the CVSS score of CVE-2026-7081?

CVE-2026-7081 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-25764 HIGH

Buffer Overflow (CWE-119)

2026-04-27 cna@vuldb.com

Buffer Overflow Tenda

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 27, 2026 - 19:07 vuln.today

cvss_changed

Analysis Generated

Apr 27, 2026 - 04:30 vuln.today

EUVD ID Assigned

Apr 27, 2026 - 04:22 euvd

EUVD-2026-25764

Analysis Generated

Apr 27, 2026 - 04:22 vuln.today

CVE Published

Apr 27, 2026 - 04:16 nvd

HIGH 7.4

DescriptionCVE.org

A vulnerability was detected in Tenda F456 1.0.0.5. Affected is the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer of the component httpd. Performing a manipulation of the argument dips results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used.

AnalysisAI

Remote authenticated buffer overflow in Tenda F456 1.0.0.5 router allows complete device compromise via the DHCP server configuration handler. A low-privileged attacker can send a crafted HTTP request with malicious 'dips' parameter to /goform/GstDhcpSetSer, triggering a buffer overflow in the httpd service that enables arbitrary code execution with full system control. Public exploit code is available on GitHub (EPSS exploitation probability data not provided, not listed in CISA KEV at time of analysis).

Technical ContextAI

This vulnerability affects the httpd web server component of Tenda F456 wireless router firmware version 1.0.0.5, specifically in the DHCP server configuration handler function fromGstDhcpSetSer. The root cause is CWE-119 (Improper Restriction on Operations within Bounds of a Memory Buffer), a classic memory safety issue in C/C++ code where insufficient input validation on the 'dips' parameter allows attacker-controlled data to overflow allocated buffer boundaries. The vulnerable endpoint /goform/GstDhcpSetSer likely handles DHCP IP address pool configuration, where the 'dips' parameter (presumably DHCP IP addresses) lacks proper length checking before being copied into a fixed-size buffer. This is characteristic of embedded device firmware where memory safety protections like ASLR, DEP, or stack canaries may be absent or weakened.

RemediationAI

Tenda has not released a patched firmware version for F456 1.0.0.5 according to available data at time of analysis (no vendor security advisory found in references, vendor site https://www.tenda.com.cn/ does not reference this CVE). Users should implement immediate compensating controls: (1) Disable remote administration access to the router's web interface, restricting management to local LAN only (eliminates network attack vector but prevents remote management); (2) Change default administrative credentials to strong unique passwords (reduces but does not eliminate risk if attacker already has LAN access); (3) Implement network segmentation to isolate the router management interface on a dedicated VLAN unreachable from user networks (requires additional switching infrastructure); (4) Monitor router for unauthorized configuration changes or reboots (detective control only, does not prevent exploitation). Long-term recommendation is to replace Tenda F456 devices with actively-maintained router models from vendors with established security update programs, as Tenda's consumer router line has historically received inconsistent firmware updates. Check https://www.tenda.com.cn/ periodically for firmware updates.