CVE-2026-7054

CVE-2026-7054 affects Tenda F456 1.0.0.5. The vulnerability is in httpd, function fromPptpUserAdd of /goform/PPTPDClient, where manipulating the opttype/username argument causes a buffer overflow. It is exploitable remotely and a public exploit exists. Metrics indicate a high-severity impact (CVS...