CVE-2026-7082: Tenda F456 httpd WrlExtraSet formWrlExtraSet buffer overflow
A flaw has been found in Tenda F456 1.0.0.5. Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSet of the component httpd. Executing a manipulation of the argument Go can lead to buffer overflow. The attack can be executed remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7082?
CVE-2026-7082 has a high severity due to its potential to cause a buffer overflow, allowing arbitrary code execution.
How do I fix CVE-2026-7082?
To fix CVE-2026-7082, update the Tenda F456 firmware to a version that addresses this buffer overflow vulnerability.
What are the potential impacts of CVE-2026-7082?
CVE-2026-7082 can lead to unauthorized access, data corruption, or complete control over the affected device.
Which devices are affected by CVE-2026-7082?
CVE-2026-7082 specifically affects the Tenda F456 version 1.0.0.5.
How can I determine if my device is vulnerable to CVE-2026-7082?
Check the firmware version of your Tenda F456 device to see if it is running version 1.0.0.5 to identify if it is vulnerable.