PT-2026-35376 · Tenda · F456

Ltzhuster · Published 2026-04-27 · Updated 2026-04-27 · CVE-2026-7099

Mitre

CVSS v3.1

8.8

High

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A vulnerability was detected in Tenda F456 1.0.0.5. The affected element is the function formQuickIndex of the file /goform/QuickIndex of the component httpd. Performing a manipulation of the argument mit linktype results in buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

CVE-2026-7099

Affected Products

F456

References · 6

• 🔥 https://github.com/Litengzheng/vuldb_new/blob/main/F456/vul_137/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7099 · Security Note
• https://vuldb.com/vuln/359674/cti · Note
• https://vuldb.com/submit/798472 · Note
• https://vuldb.com/vuln/359674 · Note
• https://tenda.com.cn · Note