CVE-2026-7097
Remote Buffer Overflow in Tenda F456 httpd Component
Publication date: 2026-04-27
Last updated on: 2026-04-30
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| tenda | f456_firmware | 1.0.0.5 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-119 | The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data. |
| CWE-120 | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The CVE-2026-7097 vulnerability affects the Tenda F456 router, version 1.0.0.5. It is a stack-based buffer overflow found in the httpd service, specifically within the function fromwebExcptypemanFilter.
This function processes a user-supplied parameter named "page" and assigns it to a variable which is then passed to the sprintf function without any bounds checking. This lack of length validation allows an attacker to overflow the stack buffer by sending an excessively long "page" parameter in a POST request to the endpoint /goform/webExcptypemanFilter.
How can this vulnerability impact me? :
Exploiting this vulnerability can lead to denial of service (DoS) or remote code execution (RCE) on the affected device.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by sending a specially crafted POST request to the endpoint /goform/webExcptypemanFilter on the Tenda F456 router version 1.0.0.5. The request should include an excessively long string as the value of the "page" parameter to test for buffer overflow.
A detection command example using curl would be:
- curl -X POST http://<target-ip>/goform/webExcptypemanFilter -d "page=$(python3 -c 'print("a"*1000)')"
If the device is vulnerable, this request may cause a denial of service or unexpected behavior indicating the buffer overflow.
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include restricting access to the vulnerable endpoint /goform/webExcptypemanFilter by implementing network-level controls such as firewall rules to block unauthorized or external access.
Additionally, monitor network traffic for suspicious POST requests targeting the "page" parameter on this endpoint.
Since the vulnerability allows remote code execution, it is recommended to update the device firmware to a version where this issue is fixed once available.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The provided information does not specify how the CVE-2026-7097 vulnerability impacts compliance with common standards and regulations such as GDPR or HIPAA.