Which versions of Tenda F456 are affected by EUVD-2026-25708?

CVE-2026-7032 affects Tenda F456 wireless routers running firmware 1.0.0.5, allowing authenticated users with low-privilege access to execute arbitrary code and completely compromise router…

Is there a public PoC exploit available for EUVD-2026-25708?

Yes, a public proof-of-concept exploit is available for EUVD-2026-25708. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate EUVD-2026-25708?

Within 24 hours: Identify all Tenda F456 devices running firmware 1.0.0.5 in your network inventory and document their locations and criticality. Within 7 days: Restrict administrative and low-privilege account access to these routers to trusted personnel only, disable remote management interfaces, and isolate affected routers from production networks if operationally feasible. Within 30 days: Contact Tenda for firmware patch status and availability; evaluate replacement with patched hardware or alternative router models, and implement network segmentation to limit router-to-internal-network communication.

Tenda F456 EUVD-2026-25708

Q: What is the CVSS score of EUVD-2026-25708?

EUVD-2026-25708 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-7032 HIGH

Classic Buffer Overflow (CWE-120)

2026-04-26 VulDB

Buffer Overflow Tenda

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

PoC Detected

Apr 29, 2026 - 18:26 vuln.today

Public exploit code

Analysis Updated

Apr 26, 2026 - 11:28 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Apr 26, 2026 - 11:22 vuln.today

cvss_changed

CVSS changed

Apr 26, 2026 - 11:22 NVD

8.8 (HIGH) 7.4 (HIGH)

Analysis Generated

Apr 26, 2026 - 11:00 vuln.today

EUVD ID Assigned

Apr 26, 2026 - 10:30 euvd

EUVD-2026-25708

Analysis Generated

Apr 26, 2026 - 10:30 vuln.today

CVE Published

Apr 26, 2026 - 10:00 nvd

HIGH 7.4

DescriptionCVE.org

A flaw has been found in Tenda F456 1.0.0.5. Affected is the function SafeEmailFilter of the file /goform/SafeEmailFilter. This manipulation of the argument page causes buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.

AnalysisAI

Buffer overflow in Tenda F456 wireless router firmware 1.0.0.5 allows authenticated remote attackers to achieve arbitrary code execution through the SafeEmailFilter function. The vulnerability requires low-privilege authentication but enables complete system compromise (confidentiality, integrity, and availability impact all rated High). A public exploit has been published on GitHub, significantly lowering the barrier for exploitation, though no CISA KEV listing or EPSS data indicates the attack remains targeted rather than widespread at this time.

Technical ContextAI

The vulnerability exists in the SafeEmailFilter function within the /goform/SafeEmailFilter endpoint of Tenda F456 router firmware version 1.0.0.5. This is a classic buffer overflow (CWE-120) caused by improper bounds checking when processing the 'page' parameter. Buffer overflows in embedded router firmware typically occur in the web management interface where input validation is insufficient, allowing attacker-controlled data to overwrite adjacent memory regions including return addresses and function pointers. The affected CPE (cpe:2.3:a:tenda:f456:*:*:*:*:*:*:*:*) indicates this is an application-level vulnerability in the router's web-based administration interface rather than the underlying operating system.

RemediationAI

No vendor-released patch or updated firmware version has been identified in available data sources at time of analysis. Until Tenda releases a security update, implement these specific compensating controls: (1) Disable remote management access to the router's web interface from WAN-side connections, restricting administrative access to LAN-only - this eliminates the network attack vector for external threats but requires physical or VPN access for legitimate administration. (2) Change default administrative credentials to strong, unique passwords (16+ characters) to raise the authentication barrier, though this only delays exploitation rather than preventing it. (3) Implement network segmentation placing the Tenda F456 in an isolated VLAN with strict firewall rules limiting lateral movement, which contains post-exploitation impact but adds network complexity. (4) For high-security environments, replace the Tenda F456 with router models from vendors with established security patching programs and enterprise support commitments. Monitor https://www.tenda.com.cn/ and VulDB advisories (https://vuldb.com/vuln/359612) for firmware updates addressing CVE-2026-7032.