


Perceptive Security
SOC/SIEM Consultancy

A weakness has been identified in Tenda F456 1.0.0.5. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component httpd. This manipul…
Published:
26 april 2026 om 22:00:00
Alert date:
27 april 2026 om 19:18:12
Source:
nvd.nist.gov
Network Infrastructure, Mobile & IoT
A buffer overflow vulnerability has been identified in Tenda F456 version 1.0.0.5 router firmware. The vulnerability affects the fromAdvSetWan function in the /goform/AdvSetWan file of the httpd component. The issue is triggered by manipulating the wanmode argument, leading to a buffer overflow condition. The vulnerability can be exploited remotely by attackers. A public exploit is available, increasing the risk of active exploitation. The vulnerability poses a high security risk due to remote exploitability and public availability of exploit code.
Technical details
Mitigation steps:
Affected products:
Tenda F456
Related links:
https://nvd.nist.gov/vuln/detail/CVE-2026-7079
https://github.com/Litengzheng/vuldb_new/blob/main/F456/vul_130/README.md
https://vuldb.com/submit/798461
https://vuldb.com/vuln/359654
https://vuldb.com/vuln/359654/cti
https://www.tenda.com.cn/
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
