Which versions of Tenda are affected by EUVD-2026-22063?

CVE-2026-6199 is a stack buffer overflow in Tenda F456 router firmware (version 1.0.0.5) that allows authenticated attackers to completely compromise affected devices through the QoS configuration…

Is there a public PoC exploit available for EUVD-2026-22063?

Yes, a public proof-of-concept exploit is available for EUVD-2026-22063. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate EUVD-2026-22063?

Within 24 hours: Identify all Tenda F456 routers running firmware 1.0.0.5 in your environment and document locations. Verify if vendor has released a patched firmware version beyond 1.0.0.5 (check Tenda support portal). Within 7 days: Restrict administrative access to the router web interface to a small set of authorized personnel; implement network segmentation to limit device access. Within 30 days: Deploy a firmware update if available from Tenda; if unavailable, evaluate replacement with a supported device or implement compensating controls (reverse proxy with authentication hardening, IP whitelisting for management access).

Tenda EUVD-2026-22063

Q: What is the CVSS score of EUVD-2026-22063?

EUVD-2026-22063 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-6199 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-04-13 VulDB

GHSA-8977-93px-wpcg

Stack Overflow Buffer Overflow Tenda

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 22, 2026 - 20:37 vuln.today

cvss_changed

PoC Detected

Apr 22, 2026 - 20:23 vuln.today

Public exploit code

Analysis Generated

Apr 15, 2026 - 12:33 vuln.today

CVSS changed

Apr 13, 2026 - 19:37 NVD

8.8 (HIGH) 7.4 (HIGH)

EUVD ID Assigned

Apr 13, 2026 - 18:56 euvd

EUVD-2026-22063

Analysis Generated

Apr 13, 2026 - 18:56 vuln.today

CVE Published

Apr 13, 2026 - 18:30 nvd

HIGH 7.4

DescriptionCVE.org

A vulnerability was found in Tenda F456 1.0.0.5. Impacted is the function fromqossetting of the file /goform/qossetting. The manipulation of the argument page results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used.

AnalysisAI

Stack-based buffer overflow in Tenda F456 router firmware 1.0.0.5 allows authenticated remote attackers to achieve complete device compromise via crafted input to the 'page' parameter in the fromqossetting QoS configuration handler. Publicly available exploit code exists (GitHub POC), CVSS 7.4 (High), EPSS 0.05% (low exploitation probability). Not actively exploited per CISA KEV. This is a classic IoT router vulnerability affecting the web management interface at /goform/qossetting, requiring valid authentication credentials but enabling full device takeover once authenticated.

Technical ContextAI

This vulnerability affects the fromqossetting function within Tenda F456 router firmware version 1.0.0.5, specifically in the /goform/qossetting endpoint that handles Quality of Service (QoS) configuration requests. The root cause is CWE-121 (Stack-based Buffer Overflow), occurring when the 'page' parameter is processed without proper bounds checking, allowing attacker-controlled data to overflow a fixed-size stack buffer. This is a memory corruption vulnerability typical of embedded systems written in C/C++ without modern memory safety protections. The affected product (CPE: cpe:2.3:a:tenda:f456) is a consumer-grade wireless router running proprietary firmware. Stack-based overflows in router web interfaces are particularly dangerous because they bypass network-level security controls once administrative access is gained, and the overflow occurs in a privileged process context that typically runs with root/administrative permissions on the underlying embedded Linux system.

RemediationAI

Users of Tenda F456 router firmware 1.0.0.5 should immediately check the Tenda support website (https://www.tenda.com.cn/) for updated firmware releases addressing CVE-2026-6199. No vendor-released patch version is independently confirmed in the available intelligence at time of analysis. As interim mitigations: (1) restrict administrative interface access to trusted management networks only via firewall rules, disabling remote management from WAN interfaces; (2) enforce strong, unique administrative passwords to prevent credential-based access that enables exploitation; (3) monitor router logs for suspicious QoS configuration changes or unexpected reboots indicating exploitation attempts; (4) consider replacing affected devices with alternative router models if Tenda does not release timely security updates. Consult VulDB tracking page https://vuldb.com/vuln/357121 and NVD entry https://nvd.nist.gov/vuln/detail/CVE-2026-6199 for patch availability updates.