CVE-2026-7033: Tenda F456 SafeClientFilter fromSafeClientFilter buffer overflow
A vulnerability has been found in Tenda F456 1.0.0.5. Affected by this vulnerability is the function fromSafeClientFilter of the file /goform/SafeClientFilter. Such manipulation of the argument menufacturer/Go leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7033?
The severity of CVE-2026-7033 is high due to the potential for remote code execution resulting from the buffer overflow.
How do I fix CVE-2026-7033?
To fix CVE-2026-7033, update the Tenda F456 device firmware to version 1.0.0.6 or later.
What systems are affected by CVE-2026-7033?
CVE-2026-7033 affects the Tenda F456 router running firmware version 1.0.0.5.
What causes the CVE-2026-7033 vulnerability?
The CVE-2026-7033 vulnerability is caused by insufficient input validation in the fromSafeClientFilter function, leading to a buffer overflow.
Can CVE-2026-7033 be exploited remotely?
Yes, CVE-2026-7033 can be exploited remotely without authentication, allowing an attacker to execute arbitrary code.