PT-2026-35348 · Tenda · F456

Ltzhust · Published 2026-04-27 · Updated 2026-04-27 · CVE-2026-7082

Mitre

CVSS v3.1

8.8

High

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A flaw has been found in Tenda F456 1.0.0.5. Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSet of the component httpd. Executing a manipulation of the argument Go can lead to buffer overflow. The attack can be executed remotely. The exploit has been published and may be used.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

CVE-2026-7082

Affected Products

F456

References · 6

• 🔥 https://github.com/Litengzheng/vuldb_new/blob/main/F456/vul_134/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7082 · Security Note
• https://vuldb.com/vuln/359657/cti · Note
• https://vuldb.com/submit/798465 · Note
• https://vuldb.com/vuln/359657 · Note
• https://tenda.com.cn · Note