Tenda f456 Firmware vulnerabilities

22 CVEs affecting Tenda f456 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-7102, published 2026-04-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-7102, published 2026-04-27. High severity, CVSS 8.8. EPSS: 6.5% chance of exploitation in the next 30 days. A vulnerability was found in Tenda F456 1.0.0.5. This impacts the function FromWriteFacMac of the file /goform/WriteFacMac of the component httpd. The manipulation of the argument mac results in…
CVE-2026-7055, published 2026-04-26. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A security vulnerability has been detected in Tenda F456 1.0.0.5. This issue affects the function fromVirtualSer of the file /goform/VirtualSer of the component httpd. The manipulation of the…
CVE-2026-7056, published 2026-04-26. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was detected in Tenda F456 1.0.0.5. Impacted is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter of the component httpd. The manipulation of the argument page results…
CVE-2026-7101, published 2026-04-27. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda F456 1.0.0.5. This affects the function fromWrlclientSet of the file /goform/WrlclientSet of the component httpd. The manipulation leads to buffer overflow.…
CVE-2026-7100, published 2026-04-27. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A flaw has been found in Tenda F456 1.0.0.5. The impacted element is the function fromNatlimitof of the file /goform/Natlimit of the component httpd. Executing a manipulation can lead to buffer…
CVE-2026-7099, published 2026-04-27. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was detected in Tenda F456 1.0.0.5. The affected element is the function formQuickIndex of the file /goform/QuickIndex of the component httpd. Performing a manipulation of the…
CVE-2026-7098, published 2026-04-27. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A security vulnerability has been detected in Tenda F456 1.0.0.5. Impacted is the function fromDhcpListClient of the file /goform/DhcpListClient of the component httpd. Such manipulation of the…
CVE-2026-7097, published 2026-04-27. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A weakness has been identified in Tenda F456 1.0.0.5. This issue affects the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter of the component httpd. This manipulation of…
CVE-2026-7082, published 2026-04-27. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A flaw has been found in Tenda F456 1.0.0.5. Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSet of the component httpd. Executing a manipulation of the…
CVE-2026-7081, published 2026-04-27. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was detected in Tenda F456 1.0.0.5. Affected is the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer of the component httpd. Performing a manipulation of the argument dips…

Latest

CVE-2026-7080, published 2026-04-27. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A security vulnerability has been detected in Tenda F456 1.0.0.5. This impacts the function fromPPTPUserSetting of the file /goform/PPTPUserSetting of the component httpd. Such manipulation of the…
CVE-2026-7079, published 2026-04-27. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A weakness has been identified in Tenda F456 1.0.0.5. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component httpd. This manipulation of the argument wanmode causes…