HarborGuard / CVE
Back to search
HIGHCVE-2026-7082Published Modified CNA VulDB

CVE-2026-7082: Tenda F456 httpd WrlExtraSet formWrlExtraSet buffer overflow

A flaw has been found in Tenda F456 1.0.0.5. Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSet of the component httpd. Executing a manipulation of the argument Go can lead to buffer overflow. The attack can be executed remotely. The exploit has been published and may be used.

Metrics

CVSS v4.0
8.7
Severity
HIGH
Fixed in
—
Affected Products
1
Affected packages
  • Tenda / F456
    1.0.0.5
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
References