CVE-2026-7079Disclosure(tenda / f456)

LOWCVSS 7.4 · HIGH

Signal is active with 5 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A weakness has been identified in Tenda F456 1.0.0.5. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component httpd. This manipulation of the argument wanmode causes buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.

tenda CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/Litengzheng/vuldb_new/blob/main/F456/vul_130/README.md

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-119CWE-120

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

f456
f456_firmware

Threat summary

5 mentions across 1 observed day

What's happening

Technical details provided in 5 signals
Disclosure: 5 classified signals
5 total mentions across 1 day

Affected systems

Vendors

tenda

Products

f456f456_firmware

2 versions affected across 2 products

Deep dive

Activity timeline5 mentions / 1d

Signal classification1 categories

Disclosure

5100.0%

Referenced assets5 URLs

By indicator

Full discourse5 posts

White Rabbitx 🏴‍☠️@TheRabbitPy164d
Disclosure
🌍 CVE-2026-7079 — Tenda F456 1.0.0.5 contains a buffer overflow in /goform/AdvSetWan, where the wanmode argument can be manipulated remotely. WAN configuration handlers are especially sensitive because they sit close to core connectivity logic. https://nvd.nist.gov/vuln/detail/CVE-2026-7079
Post summary
The post discloses a buffer overflow vulnerability in Tenda F456's WAN configuration page, noting potential remote manipulation but lacking evidence of exploitation or patch information.
100000
763 followersView on X
CVE@CVEnew164d
Disclosure
CVE-2026-7079 A weakness has been identified in Tenda F456 1.0.0.5. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component httpd. This manipulation of… https://www.cve.org/CVERecord?id=CVE-2026-7079
Post summary
CVE‑2026‑7079 highlights a weakness in the Tenda F456 router’s httpd component, but the announcement contains no exploitation details, PoC, patch, or evidence of active use.
0000097
57.3K followersView on X
CVEarity@CVEarity164d
Disclosure
⚡ New CVE Alert: CVE-2026-7079 📊 Severity: 8.8 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-7079 #CVE-2026-7079 #CVE #High #CyberSecurity #InfoSec https://t.co/glBOFsNOHQ
Post summary
The tweet announces the new CVE-2026-7079, highlighting a severity score of 8.8 and high risk, without any additional technical details, exploits, or patch information.
0000048
141 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds164d
Disclosure
CVE-2026-7079 Buffer Overflow in Tenda F456 1.0.0.5 Remote Code Execution via wa... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7079 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The post discloses a buffer overflow CVE‑2026‑7079 affecting Tenda F456 1.0.0.5, enabling remote code execution, but does not provide PoC, exploitation tools, evidence of active use, or patch information.
0000051
4.0K followersView on X
Kaitan ID Security@KaitanSecurity164d
Disclosure
⚠️ HIGH — CVE-2026-7079 A weakness has been identified in Tenda F456 1.0.0.5. This affects the function fromAdvSetWan of the file /goform/AdvSe… CVSS 8.8 Full analysis → https://sec.kaitan.id/cves/CVE-2026-7079 #Tenda #CyberSecurity #InfoSec
Post summary
Announces a high-severity vulnerability (CVE-2026-7079) affecting Tenda F456 firmware, detailing the affected component and CVSS score, and linking to a full analysis.
0000044
142 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	tenda	f456	-	-	-
OS	tenda	f456_firmware	1.0.0.5	-	-

Explore more

Back to dashboard tenda CVEs f456 vulnerabilities

What researchers are saying

CVE-2026-7079

White Rabbitx 🏴‍☠️[verified]@TheRabbitPyDisclosure

The post discloses a buffer overflow vulnerability in Tenda F456's WAN configuration page, noting potential remote manipulation but lacking evidence of exploitation or patch information.

Kaitan ID Security[verified]@KaitanSecurityDisclosure

Announces a high-severity vulnerability (CVE-2026-7079) affecting Tenda F456 firmware, detailing the affected component and CVSS score, and linking to a full analysis.

CVE@CVEnewDisclosure

CVE‑2026‑7079 highlights a weakness in the Tenda F456 router’s httpd component, but the announcement contains no exploitation details, PoC, patch, or evidence of active use.

CVEarity@CVEarityDisclosure

The tweet announces the new CVE-2026-7079, highlighting a severity score of 8.8 and high risk, without any additional technical details, exploits, or patch information.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The post discloses a buffer overflow CVE‑2026‑7079 affecting Tenda F456 1.0.0.5, enabling remote code execution, but does not provide PoC, exploitation tools, evidence of active use, or patch information.