Skip to content
Threat Feed
Subscribe

Product

F456

4 briefs RSS
critical advisory

Tenda F456 Router Buffer Overflow Vulnerability (CVE-2026-7097)

A buffer overflow vulnerability exists in Tenda F456 version 1.0.0.5 within the fromwebExcptypemanFilter function of the /goform/webExcptypemanFilter component's httpd server, which can be triggered remotely by manipulating the page argument leading to potential remote code execution.

F456 buffer-overflow router remote-code-execution cve
2r 1t 1c
critical advisory

Tenda F456 Router Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in Tenda F456 version 1.0.0.5 in the `fromGstDhcpSetSer` function, allowing remote attackers to execute arbitrary code by manipulating the 'dips' argument via a crafted HTTP request to `/goform/GstDhcpSetSer`.

F456 cve buffer_overflow router
2r 1t 1c
critical advisory

Tenda F456 Remote Buffer Overflow Vulnerability

A buffer overflow vulnerability in the `fromSetIpBind` function of Tenda F456 version 1.0.0.5 allows remote attackers to execute arbitrary code by manipulating the `page` argument in a request to `/goform/SetIpBind`.

F456 buffer-overflow router remote-code-execution cve-2026-7078
2r 1t 1c
critical advisory

Tenda F456 Remote Buffer Overflow Vulnerability

A remote buffer overflow vulnerability exists in Tenda F456 version 1.0.0.5 via manipulation of the 'page' argument in the fromDhcpListClient function of the /goform/DhcpListClient component, potentially leading to arbitrary code execution.

F456 cve-2026-7098 buffer-overflow router
2r 1t 1c