CVE-2026-7101

High

Published: 27/04/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A vulnerability has been found in Tenda F456 version 1.0.0.5, affecting the function fromWrlclientSet in the file /goform/WrlclientSet of the httpd component. Manipulation of this function leads to buffer overflow.

Risk Assessment

Remote exploitation of this vulnerability is possible, posing a serious threat to system security. The public disclosure of the exploit increases the risk of attacks.

Recommendation

It is recommended to update the device firmware to the latest version to mitigate the risk associated with this vulnerability. Additionally, monitor network traffic for potential attack attempts.

Other vulnerabilities in httpd

CVE-2026-40435Medium
A vulnerability in the httpd server causes IP-based access restrictions to not cover all endpoints when configured. This may allow connections from addresses that should be blocked.

Original NVD description (English source)

A vulnerability has been found in Tenda F456 1.0.0.5. This affects the function fromWrlclientSet of the file /goform/WrlclientSet of the component httpd. The manipulation leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.