Tenda F456 httpd WrlclientSet fromWrlclientSet buffer overflow_CVE-2026-7101

{
    "lastseen": "",
    "description": "A vulnerability has been found in Tenda F456 1.0.0.5. This affects the function fromWrlclientSet of the file /goform/WrlclientSet of the component httpd. The manipulation leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.",
    "published": "2026-04-27T08:00:14.500Z",
    "modified": "2026-04-27T08:00:14.500Z",
    "type": "cve",
    "title": "Tenda F456 httpd WrlclientSet fromWrlclientSet buffer overflow",
    "source": "VulDB",
    "references": "https://vuldb.com/vuln/359676\nhttps://vuldb.com/vuln/359676/cti\nhttps://vuldb.com/submit/798474\nhttps://github.com/Litengzheng/vuldb_new/blob/main/F456/vul_139/README.md\nhttps://www.tenda.com.cn/",
    "id": "CVE-2026-7101",
    "bulletinFamily": "",
    "cwe": [
        "CWE-120",
        "CWE-119"
    ],
    "cvelist": null,
    "sourceData": "Tenda F456 1.0.0.5",
    "sourceHref": "",
    "cvss": {
        "score": 8.7,
        "severity": "HIGH",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "F456",
    "version": "1.0.0.5",
    "vendor": "Tenda",
    "ai_description": "Buffer overflow vulnerability in Tenda F456 1.0.0.5, allowing remote exploitation via the httpd component.",
    "ai_severity": "High",
    "ai_vendor": "Tenda",
    "ai_product": "F456",
    "ai_version": "1.0.0.5",
    "ai_score": 8.7
}