Which versions of Tenda F456 are affected by CVE-2026-7082?

CVE-2026-7082 is a remote buffer overflow in Tenda F456 routers (version 1.0.0.5) that allows authenticated attackers to crash or compromise router functionality through crafted requests to the…

How to fix or mitigate CVE-2026-7082?

Within 24 hours: Identify all Tenda F456 routers running version 1.0.0.5 in your environment and document their IP addresses and network criticality. Within 7 days: Restrict network access to the /goform/WrlExtraSet endpoint via firewall rules or WAF to trusted administrative networks only; change all default credentials on affected routers to complex, unique passwords. Within 30 days: Contact Tenda for patch availability status; if no patch is released, evaluate replacement with alternative router hardware from vendors with active security support, or implement enhanced network segmentation to isolate affected routers.

Tenda F456 CVE-2026-7082

Q: What is the CVSS score of CVE-2026-7082?

CVE-2026-7082 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-25765 HIGH

Buffer Overflow (CWE-119)

2026-04-27 cna@vuldb.com

Buffer Overflow Tenda

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 27, 2026 - 19:07 vuln.today

cvss_changed

Analysis Generated

Apr 27, 2026 - 04:31 vuln.today

EUVD ID Assigned

Apr 27, 2026 - 04:22 euvd

EUVD-2026-25765

Analysis Generated

Apr 27, 2026 - 04:22 vuln.today

CVE Published

Apr 27, 2026 - 04:16 nvd

HIGH 7.4

DescriptionCVE.org

A flaw has been found in Tenda F456 1.0.0.5. Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSet of the component httpd. Executing a manipulation of the argument Go can lead to buffer overflow. The attack can be executed remotely. The exploit has been published and may be used.

AnalysisAI

Remote authenticated buffer overflow in Tenda F456 1.0.0.5 httpd allows attackers to compromise router integrity and availability via crafted WrlExtraSet requests. Exploitation occurs through the formWrlExtraSet function when manipulating the 'Go' parameter at /goform/WrlExtraSet endpoint. Public exploit code is available on GitHub (Litengzheng/vuldb_new), enabling straightforward weaponization. CVSS 7.4 (High) with CVSS v4.0 Exploit Maturity: Proof-of-Concept confirms exploitability. While requiring low-privilege authentication (PR:L), the network attack vector (AV:N) and low complexity (AC:L) make this accessible to remote attackers with basic router credentials, commonly obtained via credential stuffing or default password exploitation.

Technical ContextAI

This vulnerability affects the httpd daemon in Tenda F456 router firmware version 1.0.0.5, specifically within the wireless configuration interface. The formWrlExtraSet function handles wireless extra settings via the /goform/WrlExtraSet endpoint but fails to properly validate the length of the 'Go' parameter before copying it to a fixed-size buffer. This is a classic CWE-119 (Improper Restriction of Operations within Bounds of Memory Buffer) memory corruption issue. In embedded router httpd implementations, such buffer overflows can overwrite stack frames, function pointers, or adjacent configuration data. Tenda routers typically run lightweight Linux-based firmware with minimal memory protection mechanisms like ASLR or stack canaries, making exploitation more reliable. The affected component is part of the router's web management interface, which listens on TCP ports 80/443 by default.

RemediationAI

No vendor-released patch or firmware update identified in available sources at time of analysis. Tenda's official website (https://www.tenda.com.cn/) should be monitored for security bulletins, though the vendor's historical patching cadence for legacy models is inconsistent. Immediate compensating controls: (1) Disable remote management access via WAN interface (typically under Administration → Remote Management settings - disabling prevents Internet-based exploitation while retaining LAN-based management). This eliminates network attack vector but breaks legitimate remote administration. (2) Change default admin credentials to complex passwords (16+ characters) and restrict management interface access to specific trusted LAN IP addresses via router ACLs if supported. This raises the authentication bar (PR:L) but does not eliminate risk from LAN-based attackers or credential theft. (3) Place router behind additional firewall layer and disable UPnP to prevent exposure of management ports. (4) For high-security environments, replace affected Tenda F456 devices with actively maintained router models from vendors with established security update programs. Migration costs include hardware replacement (~$50-200 per device) and reconfiguration time but eliminates exposure to this and potential future unpatched vulnerabilities in EOL firmware.