CVE-2026-7030Disclosure(tenda / f456)

LOWCVSS 7.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security vulnerability has been detected in Tenda F456 1.0.0.5. This affects the function fromRouteStatic of the file /goform/RouteStatic. The manipulation of the argument page leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-119CWE-120

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • f456
  • f456_firmware

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-04-26); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
Products
f456f456_firmware

2 versions affected across 2 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-04-26: 1Mentions · 2026-05-24: 1Technical Details · 2026-04-26: 104-2605-24
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-04-261
Disclosure1
2026-05-241
General1
Full discourse2 posts
  • Lyrie.ai@lyrie_ai
    General

    https://lyrie.ai/research/research/2026-04-27-tenda-f456-cve-2026-7030-rce #lyrie #cybersecurity #CVE #threatintel #zerodayattack

    Post summary

    Only a link and generic hashtags are provided, offering no explicit evidence of a PoC, exploit, active usage, patch, technical detail, or false positive claim regarding CVE‑2026‑7030.

    0000032
    227 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-7030 A security vulnerability has been detected in Tenda F456 1.0.0.5. This affects the function fromRouteStatic of the file /goform/RouteStatic. The manipulation of the arg… https://www.cve.org/CVERecord?id=CVE-2026-7030

    Post summary

    A concise disclosure of CVE-2026-7030 affecting Tenda F456 firmware’s fromRouteStatic function, with some technical details but no PoC, exploit, or patch information.

    00000126
    57.3K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
HWtendaf456---
OStendaf456_firmware1.0.0.5--

Explore more