CVE-2026-7078: Tenda F456 httpd SetIpBind fromSetIpBind buffer overflow
A security flaw has been discovered in Tenda F456 1.0.0.5. The impacted element is the function fromSetIpBind of the file /goform/SetIpBind of the component httpd. The manipulation of the argument page results in buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7078?
CVE-2026-7078 is categorized as a high severity vulnerability due to the potential for remote code execution from the buffer overflow.
How do I fix CVE-2026-7078?
To fix CVE-2026-7078, you should update Tenda F456 to a patched version that addresses the buffer overflow issue.
What components are affected by CVE-2026-7078?
CVE-2026-7078 affects the httpd service specifically in the fromSetIpBind function within the /goform/SetIpBind file.
What might an attacker achieve by exploiting CVE-2026-7078?
An attacker exploiting CVE-2026-7078 could gain unauthorized access and control over the affected Tenda F456 device.
Is CVE-2026-7078 limited to specific devices?
Yes, CVE-2026-7078 specifically affects the Tenda F456 model running version 1.0.0.5.