VulnSocial

CVE-2026-6199Disclosure

LOWCVSS 7.4 · HIGH

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A vulnerability was found in Tenda F456 1.0.0.5. Impacted is the function fromqossetting of the file /goform/qossetting. The manipulation of the argument page results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used.

Back to dashboard
1.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-119CWE-121

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Peaked 1d ago at 2 mentions (2026-04-13); latest day: 2
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01122Mentions · 2026-04-13: 2Mentions · 2026-04-14: 2PoC Mentioned / Linked · 2026-04-13: 1Technical Details · 2026-04-13: 2Technical Details · 2026-04-14: 104-1304-14
Signal classification2 categories
Disclosure
375.0%
PoC
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-04-132
Disclosure1PoC1
2026-04-142
Disclosure2
Full discourse4 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-6199 A vulnerability was found in Tenda F456 1.0.0.5. Impacted is the function fromqossetting of the file /goform/qossetting. The manipulation of the argument page results i… https://www.cve.org/CVERecord?id=CVE-2026-6199 ----- Traducción: CVE-2026-6199 Se … http://infoflow.cloud`

    Post summary

    A new vulnerability (CVE-2026-6199) affecting Tenda F456 was disclosed with specific function details, but no PoC, exploit, or patch is mentioned yet.

    0000021
    71 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-6199 A vulnerability was found in Tenda F456 1.0.0.5. Impacted is the function fromqossetting of the file /goform/qossetting. The manipulation of the argument page results i… https://www.cve.org/CVERecord?id=CVE-2026-6199

    Post summary

    The text reports a new CVE (CVE-2026-6199) affecting the Tenda F456's qossetting function, but provides no details on exploitation, patches, or severity.

    00000145
    57.2K followersView on X
  • Kaitan ID Security@KaitanSecurity
    Disclosure

    ⚠️ HIGH — CVE-2026-6199 A vulnerability was found in Tenda F456 1.0.0.5. Impacted is the function fromqossetting of the file /goform/qossetting… CVSS 8.8 Full analysis → https://sec.kaitan.id/cves/CVE-2026-6199 #Tenda #CyberSecurity #InfoSec

    Post summary

    A new high‑severity vulnerability (CVE‑2026‑6199) was disclosed for Tenda F456, affecting the qos setting function with a CVSS score of 8.8; a detailed analysis is available via the provided link.

    000001
    144 followersView on X
  • CVEFind.com@CveFindCom
    PoC

    [CVE-2026-6199: HIGH] Critical vulnerability discovered in Tenda F456 1.0.0.5 allows for remote stack-based buffer overflow attack via the /goform/qossetting function. Exploit now public. #cybersecurity#cve,CVE-2026-6199,#cybersecurity https://cvefind.com/CVE-2026-6199

    Post summary

    "CVE‑2026‑6199 is a critical stack‑based buffer overflow in the Tenda F456 router; a public exploit is now available, but no patch or active exploitation information is provided."

    0000034
    620 followersView on X

Explore more

Back to dashboard