PT-2026-35347 · Tenda · F456

Ltzhust · Published 2026-04-27 · Updated 2026-04-27 · CVE-2026-7081

NVD

CVSS v2.0

9.0

High

AV:N/AC:L/Au:S/C:C/I:C/A:C

A vulnerability was detected in Tenda F456 1.0.0.5. Affected is the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer of the component httpd. Performing a manipulation of the argument dips results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

CVE-2026-7081

Affected Products

F456

References · 6

• 🔥 https://github.com/Litengzheng/vuldb_new/blob/main/F456/vul_133/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7081 · Security Note
• https://vuldb.com/vuln/359656 · Note
• https://vuldb.com/vuln/359656/cti · Note
• https://vuldb.com/submit/798464 · Note
• https://tenda.com.cn · Note