CVE-2026-7098Disclosure(tenda / f456)

LOWCVSS 7.4 · HIGH

Exploit discussion active in current signal (4 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A security vulnerability has been detected in Tenda F456 1.0.0.5. Impacted is the function fromDhcpListClient of the file /goform/DhcpListClient of the component httpd. Such manipulation of the argument page leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

tenda CVEs Back to dashboard

1.5/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/Litengzheng/vuldb_new/blob/main/F456/vul_136/README.md

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-119CWE-120

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

f456
f456_firmware

Threat summary

Public PoC is present in monitored signal
4 mentions across 1 observed day

What's happening

PoC mentioned or linked in 1 signal
Technical details provided in 4 signals
Disclosure: 3 classified signals
4 total mentions across 1 day

Affected systems

Vendors

tenda

Products

f456f456_firmware

2 versions affected across 2 products

Deep dive

Activity timeline4 mentions / 1d

Signal classification2 categories

Disclosure

375.0%

PoC

125.0%

Referenced assets4 URLs

By indicator

Full discourse4 posts

CVE@CVEnew164d
Disclosure
CVE-2026-7098 A security vulnerability has been detected in Tenda F456 1.0.0.5. Impacted is the function fromDhcpListClient of the file /goform/DhcpListClient of the component httpd.… https://www.cve.org/CVERecord?id=CVE-2026-7098
Post summary
The text identifies a new vulnerability in Tenda F456 1.0.0.5, affecting the fromDhcpListClient function within the /goform/DhcpListClient component of httpd, but does not mention any PoC, exploit, active use, patch, or debunking information.
00010136
57.3K followersView on X
Infoflowcloud@infoflowcloud164d
Disclosure
🚨*CVE* CVE-2026-7098 A security vulnerability has been detected in Tenda F456 1.0.0.5. Impacted is the function fromDhcpListClient of the file /goform/DhcpListClient of the component httpd.… https://www.cve.org/CVERecord?id=CVE-2026-7098 ----- Traducción: CVE-2026-7098 Se … http://infoflow.cloud`
Post summary
This post provides an initial disclosure for CVE-2026-7098, detailing a vulnerability in the Tenda F456’s httpd component, specifically affecting the fromDhcpListClient function of the /goform/DhcpListClient file.
0000032
72 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds164d
PoC
CVE-2026-7098 Buffer Overflow in Tenda F456 1.0.0.5 DhcpListClient Function (Exploitation Disclosed) https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7098
Post summary
CVE-2026-7098 involves a buffer overflow in Tenda F456’s DhcpListClient function with exploitation disclosed, but no patch, active exploitation, or detailed exploit code is provided.
0000045
4.0K followersView on X
Kaitan ID Security@KaitanSecurity164d
Disclosure
⚠️ HIGH — CVE-2026-7098 A security vulnerability has been detected in Tenda F456 1.0.0.5. Impacted is the function fromDhcpListClient of the fi… CVSS 8.8 Full analysis → https://sec.kaitan.id/cves/CVE-2026-7098 #Tenda #CyberSecurity #InfoSec
Post summary
The post reports a high‑severity (CVSS 8.8) vulnerability CVE‑2026‑7098 in Tenda F456 firmware, noting the impacted function but providing no PoC, exploit, patch, or active exploitation details.
0000040
142 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	tenda	f456	-	-	-
OS	tenda	f456_firmware	1.0.0.5	-	-

Explore more

Back to dashboard tenda CVEs f456 vulnerabilities

What researchers are saying

CVE-2026-7098

Kaitan ID Security[verified]@KaitanSecurityDisclosure

The post reports a high‑severity (CVSS 8.8) vulnerability CVE‑2026‑7098 in Tenda F456 firmware, noting the impacted function but providing no PoC, exploit, patch, or active exploitation details.

CVE@CVEnewDisclosure

The text identifies a new vulnerability in Tenda F456 1.0.0.5, affecting the fromDhcpListClient function within the /goform/DhcpListClient component of httpd, but does not mention any PoC, exploit, active use, patch, or debunking information.

Infoflowcloud@infoflowcloudDisclosure

This post provides an initial disclosure for CVE-2026-7098, detailing a vulnerability in the Tenda F456’s httpd component, specifically affecting the fromDhcpListClient function of the /goform/DhcpListClient file.

Vulmon Vulnerability Feed@VulmonFeedsPoC

CVE-2026-7098 involves a buffer overflow in Tenda F456’s DhcpListClient function with exploitation disclosed, but no patch, active exploitation, or detailed exploit code is provided.