PT-2026-35213 · Tenda · F456

Ltzhust2 · Published 2026-04-26 · Updated 2026-04-26 · CVE-2026-7030

Mitre

CVSS v3.1

8.8

High

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A security vulnerability has been detected in Tenda F456 1.0.0.5. This affects the function fromRouteStatic of the file /goform/RouteStatic. The manipulation of the argument page leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

CWE-119

Related Identifiers

CVE-2026-7030

Affected Products

F456

References · 6

• 🔥 https://github.com/Litengzheng/vuldb_new/blob/main/F456/vul_120/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7030 · Security Note
• https://tenda.com.cn · Note
• https://vuldb.com/submit/798451 · Note
• https://vuldb.com/vuln/359610/cti · Note
• https://vuldb.com/vuln/359610 · Note