PT-2026-35232 · Tenda · F456

Ltzhuster2 · Published 2026-04-26 · Updated 2026-04-26 · CVE-2026-7054

Mitre

CVSS v3.1

8.8

High

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A weakness has been identified in Tenda F456 1.0.0.5. This vulnerability affects the function fromPptpUserAdd of the file /goform/PPTPDClient of the component httpd. Executing a manipulation of the argument opttype/usernamewith can lead to buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

CWE-119

Related Identifiers

CVE-2026-7054

Affected Products

F456

References · 5

• 🔥 https://github.com/Litengzheng/vuldb_new/blob/main/F456/vul_125/README.md · Exploit
• https://tenda.com.cn · Note
• https://vuldb.com/vuln/359627 · Note
• https://vuldb.com/vuln/359627/cti · Note
• https://vuldb.com/submit/798456 · Note