Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-7053: Tenda F456 Router Allows Remote Attack

CVE-2026-7053 · published 6 months ago

Summary

A security flaw in the Tenda F456 router allows hackers to remotely take control of the device. This could lead to unauthorized access to your network and potentially allow hackers to steal your data or disrupt your internet connection. We recommend updating the router's firmware to the latest version to fix this issue.

Original advisory text

A security flaw has been discovered in Tenda F456 1.0.0.5. This affects the function frmL7ProtForm of the file /goform/L7Prot of the component httpd. Performing a manipulation of the argument page results in buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

References

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

7.4 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-119Buffer Overflow

CWE-120Classic Buffer Overflow

Timeline

Published26 Apr 2026

Updated4 Nov 2026

First seen26 Apr 2026

Sources

CVE-2026-7053 · NVD

Track software like this

Free during beta