CVE-2026-7029

HighCVSS 8.8/10Last modified Oct 26, 2026

Description

A weakness has been identified in Tenda F456 1.0.0.5. The impacted element is the function fromaddressNat of the file /goform/addressNat. Executing a manipulation of the argument menufacturer/Go can lead to buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119CWE-120

Affected software

VendorProductVersions
TendaF4561.0.0.5

References

Timeline

Published
Apr 26, 2026
Last modified
Oct 26, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-702905.5Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.CVE-2026-702919.8Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.CVE-2026-702925.5Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.CVE-2026-702935.5Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.CVE-2026-702945.5Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.CVE-2026-702955.5Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.CVE-2026-702969.8Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.CVE-2026-702978.8Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.CVE-2026-702986.5Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker CVE-2026-702998.8Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.CVE-2026-70308.8A security vulnerability has been detected in Tenda F456 1.0.0.5. This affects the function fromRouteStatic of the file /goform/RouteStatic.CVE-2026-703009.8Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-7029: High severity, CVSS 8.8 | Vulnix