VulnSocial

CVE-2026-6198Disclosure

LOWCVSS 7.4 · HIGH

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A vulnerability has been found in Tenda F456 1.0.0.5. This issue affects the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Back to dashboard
1.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-119CWE-121

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Exploit: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-04-13); latest day: 2
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01122Mentions · 2026-04-13: 2Mentions · 2026-04-14: 2PoC Mentioned / Linked · 2026-04-13: 1Technical Details · 2026-04-13: 2Technical Details · 2026-04-14: 104-1304-14
Signal classification2 categories
Disclosure
375.0%
Exploit
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-04-132
Disclosure1Exploit1
2026-04-142
Disclosure2
Full discourse4 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-6198 A vulnerability has been found in Tenda F456 1.0.0.5. This issue affects the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the… https://www.cve.org/CVERecord?id=CVE-2026-6198 ----- Traducción: CVE-2026-6198 Se … http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-6198 affecting Tenda F456 firmware, noting the vulnerable function and file, but offers no PoC, exploit, or mitigation details.

    0000021
    71 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-6198 A vulnerability has been found in Tenda F456 1.0.0.5. This issue affects the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the… https://www.cve.org/CVERecord?id=CVE-2026-6198

    Post summary

    CVE-2026-6198 is a newly disclosed vulnerability in Tenda F456 firmware affecting the fromNatStaticSetting function; no details on exploitation, PoC, patch, or technical specifics are available.

    00000371
    57.2K followersView on X
  • Kaitan ID Security@KaitanSecurity
    Disclosure

    ⚠️ HIGH — CVE-2026-6198 A vulnerability has been found in Tenda F456 1.0.0.5. This issue affects the function fromNatStaticSetting of the file … CVSS 8.8 Full analysis → https://sec.kaitan.id/cves/CVE-2026-6198 #Tenda #CyberSecurity #InfoSec

    Post summary

    The tweet discloses CVE‑2026‑6198, a critical vulnerability in Tenda F456 firmware affecting the fromNatStaticSetting function with a CVSS score of 8.8, but no PoC, exploitation tool, patch, or active exploitation is mentioned.

    000000
    144 followersView on X
  • CVEFind.com@CveFindCom
    Exploit

    [CVE-2026-6198: HIGH] Vulnerability alert: Tenda F456 1.0.0.5 at risk due to stack-based buffer overflow in fromNatStaticSetting function, allowing remote attacks. Public exploit disclosed.#cve,CVE-2026-6198,#cybersecurity https://cvefind.com/CVE-2026-6198

    Post summary

    CVE‑2026‑6198 is a high‑severity stack‑based buffer overflow in Tenda F456, with a publicly disclosed exploit enabling remote attacks.

    0000033
    620 followersView on X

Explore more

Back to dashboard