Skip to main content

Tenda F456 EUVD-2026-25705

| CVE-2026-7030 HIGH
Classic Buffer Overflow (CWE-120)
2026-04-26 VulDB
Buffer Overflow Tenda
7.4
CVSS 4.0
Share

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

8
PoC Detected
Apr 30, 2026 - 14:03 vuln.today
Public exploit code
Analysis Updated
Apr 26, 2026 - 10:27 vuln.today
v2 (cvss_changed)
Re-analysis Queued
Apr 26, 2026 - 10:22 vuln.today
cvss_changed
CVSS changed
Apr 26, 2026 - 10:22 NVD
8.8 (HIGH) 7.4 (HIGH)
Analysis Generated
Apr 26, 2026 - 10:15 vuln.today
EUVD ID Assigned
Apr 26, 2026 - 09:45 euvd
EUVD-2026-25705
Analysis Generated
Apr 26, 2026 - 09:45 vuln.today
CVE Published
Apr 26, 2026 - 09:15 nvd
HIGH 7.4

DescriptionNVD

A security vulnerability has been detected in Tenda F456 1.0.0.5. This affects the function fromRouteStatic of the file /goform/RouteStatic. The manipulation of the argument page leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

AnalysisAI

Remote code execution in Tenda F456 router firmware version 1.0.0.5 allows authenticated attackers to crash the device or execute arbitrary code via buffer overflow in the RouteStatic configuration handler. The vulnerability targets the 'page' parameter in /goform/RouteStatic endpoint and requires only low-privilege authentication (CVSS PR:L). …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: Inventory all Tenda F456 devices in production and identify firmware version 1.0.0.5 deployments; isolate affected devices from untrusted networks if possible. Within 7 days: Implement network-level access controls restricting /goform/RouteStatic endpoint access to trusted administration sources only; disable remote management features if not operationally required; monitor for suspicious authentication attempts and RouteStatic requests. …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Share

EUVD-2026-25705 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy