CVE-2026-9389: Tenda F456 L7Im frmL7ImForm buffer overflow
A security vulnerability has been detected in Tenda F456 1.0.0.5. This affects the function frmL7ImForm of the file /goform/L7Im. The manipulation of the argument page leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable remote web/remote management access on the device to prevent remote exploitation of the /goform/L7Im endpoint.
Tenda F456 web administration remote_management = disabled - Compensating control
Block or restrict access to the /goform/L7Im endpoint and the router's web management interface from untrusted networks. Examples: block WAN/Internet access to the management interface at the perimeter firewall, restrict access to trusted IP addresses or require VPN access.
- Operational
Monitor Tenda vendor advisories for an official fix and apply vendor-supplied updates when available. If the device was exposed, rotate administrative credentials and review logs for signs of compromise.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9389?
CVE-2026-9389 has a severity rating of 8.8, which is considered high.
How do I fix CVE-2026-9389?
To mitigate CVE-2026-9389, update the Tenda F456 firmware to the latest version that addresses this vulnerability.
What type of vulnerability is associated with CVE-2026-9389?
CVE-2026-9389 is a buffer overflow vulnerability.
Can CVE-2026-9389 be exploited remotely?
Yes, CVE-2026-9389 can be exploited remotely due to the manipulation of arguments.
What impact does CVE-2026-9389 have on the Tenda F456?
CVE-2026-9389 can lead to remote code execution due to a buffer overflow vulnerability.