Which versions of Tenda F456 are affected by CVE-2026-7099?

Tenda F456 routers running firmware 1.0.0.5 are vulnerable to authenticated remote code execution via a buffer overflow in the HTTP daemon, allowing attackers with low-privilege access to compromise…

How to fix or mitigate CVE-2026-7099?

Within 24 hours: Inventory all Tenda F456 routers and document firmware versions in use. Within 7 days: Restrict network access to the HTTP management interface via firewall rules, limit administrative access to trusted networks only, and disable remote management features if not operationally required. Within 30 days: Contact Tenda for patch status and timeline; evaluate replacement with alternative vendor equipment if patch remains unavailable; implement network segmentation to isolate router management traffic.

Tenda F456 CVE-2026-7099

Q: What is the CVSS score of CVE-2026-7099?

CVE-2026-7099 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-25799 HIGH

Buffer Overflow (CWE-119)

2026-04-27 cna@vuldb.com

Buffer Overflow Tenda

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 27, 2026 - 19:07 vuln.today

cvss_changed

Analysis Generated

Apr 27, 2026 - 09:31 vuln.today

EUVD ID Assigned

Apr 27, 2026 - 09:22 euvd

EUVD-2026-25799

Analysis Generated

Apr 27, 2026 - 09:22 vuln.today

CVE Published

Apr 27, 2026 - 09:16 nvd

HIGH 7.4

DescriptionCVE.org

A vulnerability was detected in Tenda F456 1.0.0.5. The affected element is the function formQuickIndex of the file /goform/QuickIndex of the component httpd. Performing a manipulation of the argument mit_linktype results in buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.

AnalysisAI

Remote code execution in Tenda F456 router firmware 1.0.0.5 allows authenticated attackers to trigger buffer overflow via crafted mit_linktype parameter to /goform/QuickIndex endpoint in httpd service. Public exploit code exists on GitHub (Litengzheng/vuldb_new), enabling memory corruption with high impact to confidentiality, integrity, and availability. CVSS 7.4 reflects low attack complexity with network access requiring only low-privilege authentication. No vendor patch identified at time of analysis.

Technical ContextAI

This vulnerability exploits the formQuickIndex function in Tenda F456's httpd web management service, targeting the QuickIndex endpoint handler. The underlying issue is CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), specifically through insufficient input validation on the mit_linktype parameter. This class of vulnerability allows attackers to write beyond allocated buffer boundaries, corrupting adjacent memory structures. Tenda F456 is a consumer-grade wireless router; the httpd component handles the web-based administration interface. The affected version 1.0.0.5 represents firmware deployed on hardware that commonly lacks modern exploit mitigations like ASLR or stack canaries, making successful exploitation more reliable once authenticated access is obtained.

RemediationAI

Check the Tenda official website (https://www.tenda.com.cn/) for firmware updates beyond version 1.0.0.5 addressing CVE-2026-7099, though no vendor-released patch is confirmed from available references. As immediate compensating controls: (1) Disable remote administration access to the router's web interface - restrict management to local LAN only via router settings under Administration/Remote Management, trading off remote manageability for attack surface reduction; (2) Change default administrative credentials to strong unique passwords exceeding 16 characters, as PR:L exploitation requires valid authentication; (3) Implement network segmentation placing the Tenda F456 on an isolated management VLAN if used in business environments, though this adds configuration complexity; (4) Monitor for unauthorized authentication attempts and unexpected POST requests to /goform/QuickIndex in router logs if logging capabilities exist. Consider hardware replacement if Tenda discontinues support for F456 model, as consumer routers often have limited patch lifecycles.