CVE-2026-7081: Tenda F456 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflow
A vulnerability was detected in Tenda F456 1.0.0.5. Affected is the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer of the component httpd. Performing a manipulation of the argument dips results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7081?
CVE-2026-7081 is classified as a critical vulnerability due to its potential for remote exploitation through buffer overflow.
How do I fix CVE-2026-7081?
To fix CVE-2026-7081, update the Tenda F456 firmware to the latest version beyond 1.0.0.5.
What can an attacker do with CVE-2026-7081?
An attacker exploiting CVE-2026-7081 can achieve arbitrary code execution on the affected device via crafted input.
Which devices are affected by CVE-2026-7081?
CVE-2026-7081 affects the Tenda F456 device running firmware version 1.0.0.5.
Is there a workaround for CVE-2026-7081?
Currently, there are no documented workarounds available for CVE-2026-7081 other than applying the firmware update.