CVE-2026-7080Disclosure(tenda / f456)

LOWCVSS 7.4 · HIGH

Signal is active with 4 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security vulnerability has been detected in Tenda F456 1.0.0.5. This impacts the function fromPPTPUserSetting of the file /goform/PPTPUserSetting of the component httpd. Such manipulation of the argument delno leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-119CWE-120

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • f456
  • f456_firmware

Threat summary

  • 4 mentions across 1 observed day

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 4 classified signals
  • 4 total mentions across 1 day

Affected systems

Vendors
Products
f456f456_firmware

2 versions affected across 2 products

Deep dive

Activity timeline4 mentions / 1d
01234Mentions · 2026-04-27: 4Technical Details · 2026-04-27: 304-27
Signal classification1 categories
Disclosure
4100.0%
Referenced assets5 URLs
Full discourse4 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-7080 A security vulnerability has been detected in Tenda F456 1.0.0.5. This impacts the function fromPPTPUserSetting of the file /goform/PPTPUserSetting of the component htt… https://www.cve.org/CVERecord?id=CVE-2026-7080

    Post summary

    An initial discovery of CVE-2026-7080 identifies a flaw in the fromPPTPUserSetting function of Tenda F456 firmware; no PoC, exploit, patch, or active exploitation information is supplied.

    0000082
    57.3K followersView on X
  • CVEarity@CVEarity
    Disclosure

    ⚡ New CVE Alert: CVE-2026-7080 📊 Severity: 8.8 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-7080 #CVE-2026-7080 #CVE #High #CyberSecurity #InfoSec https://t.co/GE8UbBQrY6

    Post summary

    A new vulnerability, CVE-2026-7080, has been reported with a severity score of 8.8 affecting multiple unspecified products, but no further technical details or mitigation information are provided.

    0000048
    141 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-7080 Buffer Overflow in Tenda F456 1.0.0.5 PPTP User Setting Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7080 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1

    Post summary

    The post announces CVE‑2026‑7080, a buffer overflow in a Tenda device, but provides no PoC, exploit code, or evidence of active exploitation.

    0000048
    4.0K followersView on X
  • Kaitan ID Security@KaitanSecurity
    Disclosure

    ⚠️ HIGH — CVE-2026-7080 A security vulnerability has been detected in Tenda F456 1.0.0.5. This impacts the function fromPPTPUserSetting of the … CVSS 8.8 Full analysis → https://sec.kaitan.id/cves/CVE-2026-7080 #Tenda #CyberSecurity #InfoSec

    Post summary

    The post announces the detection of CVE-2026-7080 in Tenda F456 with a high severity score and mentions the affected function, but it does not provide exploit code, active exploitation evidence, or patch details.

    0000045
    142 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
HWtendaf456---
OStendaf456_firmware1.0.0.5--

Explore more