Tenda F456 vulnerabilities, page 2

28 vulnerabilities

Known vulnerabilities in Tenda F456, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9CriticalCVE-2026-7100tenda · f456_firmwareTenda F456 httpd Natlimit fromNatlimitof buffer overflowA flaw has been found in Tenda F456 1.0.0.5. The impacted element is the function fromNatlimitof of the file /goform/Natlimit of the component httpd. Executing a manipulation can lead to buffer overflow. The attack may be launched remotely. The exploit has been published and may be used.EPSS1.01%9CriticalCVE-2026-7032tenda · f456_firmwareTenda F456 SafeEmailFilter buffer overflowA flaw has been found in Tenda F456 1.0.0.5. Affected is the function SafeEmailFilter of the file /goform/SafeEmailFilter. This manipulation of the argument page causes buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.EPSS1.01%9CriticalCVE-2026-7101tenda · f456_firmwareTenda F456 httpd WrlclientSet fromWrlclientSet buffer overflowA vulnerability has been found in Tenda F456 1.0.0.5. This affects the function fromWrlclientSet of the file /goform/WrlclientSet of the component httpd. The manipulation leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.EPSS1.01%9CriticalCVE-2026-6197tenda · f456_firmwareTenda F456 AdvSetWrlsafeset formWrlsafeset stack-based overflowA flaw has been found in Tenda F456 1.0.0.5. This vulnerability affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset. Executing a manipulation of the argument mit_ssid can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used.EPSS0.79%9CriticalCVE-2026-6200tenda · f456_firmwareTenda F456 webtypelibrary formwebtypelibrary stack-based overflowA vulnerability was determined in Tenda F456 1.0.0.5. The affected element is the function formwebtypelibrary of the file /goform/webtypelibrary. This manipulation of the argument menufacturer/Go causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.EPSS0.79%9CriticalCVE-2026-6199tenda · f456_firmwareTenda F456 qossetting fromqossetting stack-based overflowA vulnerability was found in Tenda F456 1.0.0.5. Impacted is the function fromqossetting of the file /goform/qossetting. The manipulation of the argument page results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used.EPSS0.79%9CriticalCVE-2026-6196tenda · f456_firmwareTenda F456 exeCommand fromexeCommand stack-based overflowA vulnerability was detected in Tenda F456 1.0.0.5. This affects the function fromexeCommand of the file /goform/exeCommand. Performing a manipulation of the argument cmdinput results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used.EPSS0.79%9CriticalCVE-2026-6198tenda · f456_firmwareTenda F456 NatStaticSetting fromNatStaticSetting stack-based overflowA vulnerability has been found in Tenda F456 1.0.0.5. This issue affects the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.79%