


Perceptive Security
SOC/SIEM Consultancy

A weakness has been identified in Tenda F456 1.0.0.5. This issue affects the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter of the c…
Published:
26 april 2026 om 22:00:00
Alert date:
27 april 2026 om 19:18:12
Source:
nvd.nist.gov
Network Infrastructure, Mobile & IoT
A buffer overflow vulnerability has been identified in Tenda F456 router firmware version 1.0.0.5. The vulnerability affects the fromwebExcptypemanFilter function in the /goform/webExcptypemanFilter file of the httpd component. The issue occurs when manipulating the 'page' argument, causing a buffer overflow condition. The vulnerability can be exploited remotely by attackers. Public exploits are already available, increasing the risk of active exploitation. This represents a significant security risk for affected Tenda router deployments.
Technical details
Mitigation steps:
Affected products:
Tenda F456
Related links:
https://nvd.nist.gov/vuln/detail/CVE-2026-7097
https://github.com/Litengzheng/vuldb_new/blob/main/F456/vul_135/README.md
https://vuldb.com/submit/798470
https://vuldb.com/vuln/359672
https://vuldb.com/vuln/359672/cti
https://www.tenda.com.cn/
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
