VulnSocial

CVE-2026-6197Disclosure

LOWCVSS 7.4 · HIGH

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A flaw has been found in Tenda F456 1.0.0.5. This vulnerability affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset. Executing a manipulation of the argument mit_ssid can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used.

Back to dashboard
1.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-119CWE-121

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-04-13); latest day: 2
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01122Mentions · 2026-04-13: 2Mentions · 2026-04-14: 2PoC Mentioned / Linked · 2026-04-13: 1Technical Details · 2026-04-13: 2Technical Details · 2026-04-14: 104-1304-14
Signal classification2 categories
Disclosure
375.0%
General
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-04-132
Disclosure1General1
2026-04-142
Disclosure2
Full discourse4 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-6197 A flaw has been found in Tenda F456 1.0.0.5. This vulnerability affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset. Executing a manipulation of th… https://www.cve.org/CVERecord?id=CVE-2026-6197 ----- Traducción: CVE-2026-6197 Se … http://infoflow.cloud`

    Post summary

    CVE-2026-6197 is identified as a flaw in Tenda F456's formWrlsafeset function, but no exploit details, patches, or active use are disclosed.

    0000028
    71 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-6197 A flaw has been found in Tenda F456 1.0.0.5. This vulnerability affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset. Executing a manipulation of th… https://www.cve.org/CVERecord?id=CVE-2026-6197

    Post summary

    A flaw has been identified in Tenda F456 firmware (1.0.0.5) affecting the formWrlsafeset function; the issue is documented in CVE-2026-6197, but no PoC, exploit, active exploitation, or patch is provided.

    000001.0K
    57.2K followersView on X
  • Kaitan ID Security@KaitanSecurity
    General

    ⚠️ HIGH — CVE-2026-6197 A flaw has been found in Tenda F456 1.0.0.5. This vulnerability affects the function formWrlsafeset of the file /goform… CVSS 8.8 Full analysis → https://sec.kaitan.id/cves/CVE-2026-6197 #Tenda #CyberSecurity #InfoSec

    Post summary

    The post highlights a high‑severity CVE‑2026‑6197 affecting Tenda F456, noting its target function and CVSS score but providing no evidence of exploitation, patches, or a PoC.

    000000
    144 followersView on X
  • CVEFind.com@CveFindCom
    Disclosure

    [CVE-2026-6197: HIGH] Vulnerability alert: Tenda F456 1.0.0.5 found with stack-based buffer overflow risk through formWrlsafeset function. Remote attack possible with published exploit.#cve,CVE-2026-6197,#cybersecurity https://cvefind.com/CVE-2026-6197

    Post summary

    A high‑severity stack‑based buffer overflow has been identified in Tenda F456 1.0.0.5, with a published exploit that could enable remote attacks; no patch or active exploitation evidence is provided.

    0000034
    620 followersView on X

Explore more

Back to dashboard