CVE-2026-7031

HighCVSS 8.8/10Last modified Oct 26, 2026

Description

A vulnerability was detected in Tenda F456 1.0.0.5. This impacts the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the argument page results in buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119CWE-120

Affected software

VendorProductVersions
TendaF4561.0.0.5

References

Timeline

Published
Apr 26, 2026
Last modified
Oct 26, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-703105.5Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.CVE-2026-703117.8Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2026-703125.5Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.CVE-2026-703137.8Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.CVE-2026-703145.5Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-703155.5Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-703165.5Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.CVE-2026-703175.5Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.CVE-2026-703185.5Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.CVE-2026-703195.5Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.CVE-2026-70328.8A flaw has been found in Tenda F456 1.0.0.5. Affected is the function SafeEmailFilter of the file /goform/SafeEmailFilter. This manipulationCVE-2026-703205.5Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-7031: High severity, CVSS 8.8 | Vulnix