CVE-2026-7082Disclosure(tenda / f456)

LOWCVSS 7.4 · HIGH

Signal is active with 4 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw has been found in Tenda F456 1.0.0.5. Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSet of the component httpd. Executing a manipulation of the argument Go can lead to buffer overflow. The attack can be executed remotely. The exploit has been published and may be used.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-119CWE-120

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • f456
  • f456_firmware

Threat summary

  • 4 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • 4 total mentions across 1 day

Affected systems

Vendors
Products
f456f456_firmware

2 versions affected across 2 products

Deep dive

Activity timeline4 mentions / 1d
01234Mentions · 2026-04-27: 4Technical Details · 2026-04-27: 204-27
Signal classification2 categories
Disclosure
375.0%
General
125.0%
Referenced assets4 URLs
Full discourse4 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-7082 A flaw has been found in Tenda F456 1.0.0.5. Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSet of the component httpd. Exec… https://www.cve.org/CVERecord?id=CVE-2026-7082

    Post summary

    The message announces a discovered flaw in Tenda F456, noting the affected component, but provides no exploitation details, patches, or PoC evidence.

    00000102
    57.3K followersView on X
  • CVEarity@CVEarity
    Disclosure

    ⚡ New CVE Alert: CVE-2026-7082 📊 Severity: 8.8 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-7082 #CVE-2026-7082 #CVE #High #CyberSecurity #InfoSec https://t.co/btTcD3UTOO

    Post summary

    The tweet announces the new CVE-2026-7082 with a high severity rating but provides no further technical or remedial details.

    0000052
    141 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-7082 Buffer Overflow in Tenda F456 1.0.0.5 httpd Component (Remote Exploitation) https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7082

    Post summary

    The post announces a buffer overflow vulnerability (CVE‑2026‑7082) in the Tenda F456's httpd component, noting potential remote exploitation but providing no PoC, exploit code, patches, or claims of active attacks.

    0000053
    4.0K followersView on X
  • Kaitan ID Security@KaitanSecurity
    General

    ⚠️ HIGH — CVE-2026-7082 A flaw has been found in Tenda F456 1.0.0.5. Affected by this vulnerability is the function formWrlExtraSet of the file… CVSS 8.8 Full analysis → https://sec.kaitan.id/cves/CVE-2026-7082 #Tenda #CyberSecurity #InfoSec

    Post summary

    The post announces a high‑severity CVE for the Tenda F456 device, providing basic technical details and a CVSS score, but does not disclose PoC, exploit code, or patch information.

    0000048
    142 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
HWtendaf456---
OStendaf456_firmware1.0.0.5--

Explore more