Buffer Overflow Vulnerability in Tenda F456 Router
CVE-2026-7099

8.7HIGH

Key Information:

Vendor: Tenda
Status: F456
Vendor: CVE Published:; 27 April 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-7099?

A buffer overflow vulnerability has been identified in the Tenda F456 router. Specifically, the vulnerability lies in the function formQuickIndex located in the /goform/QuickIndex file of the httpd component. By manipulating the 'mit_linktype' argument, an attacker can cause a buffer overflow, which may lead to arbitrary code execution. This security flaw can be exploited remotely, potentially allowing unauthorized access or control over the affected device. It is important for users to review the vulnerability details and implement appropriate security measures.

Affected Version(s)

F456 1.0.0.5

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-7099 - Proof of Concept