CVE-2026-7057

A flaw has been found in Tenda F456 1.0.0.5. The affected element is an unknown function of the file /goform/setcfm of the component httpd. This manipulation of the argument funcname/funcpara1 causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published a...

The vulnerability of the fromSetCfm() function in Tenda F456 router software allows a hacker to execute arbitrary code.

The vulnerability of the fromSetCfm function in Tenda F456 router software lies in the copying of buffers without checking the size of the input data when processing parameters funcname and funcpara1. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a...

CVE-2026-7057

A flaw has been found in Tenda F456 1.0.0.5. The affected element is an unknown function of the file /goform/setcfm of the component httpd. This manipulation of the argument funcname/funcpara1 causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published a...

CVE-2026-7057: Buffer Copy without Checking Size of Input

A flaw has been found in Tenda F456 1.0.0.5. The affected element is an unknown function of the file /goform/setcfm of the component httpd. This manipulation of the argument funcname/funcpara1 causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published a...

Tenda F456 缓冲区错误漏洞

The Tenda F456 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.5 of the Tenda F456 contains a buffer overflow vulnerability. This vulnerability stems from improper handling of the funcname/funcpara1 parameter in the goform/setcfm file within the httpd component, which ma...

CVE-2025-52221

Tenda AC6 15.03.05.16multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters...

EUVD-2025-209313

Tenda AC6 15.03.05.16multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters...

CVE-2025-52221

Tenda AC6 15.03.05.16multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters...

CVE-2025-52221

Tenda AC6 15.03.05.16multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters...

CVE-2025-52221: Out-of-bounds Write

Tenda AC6 15.03.05.16multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters...

CVE-2025-52221

Tenda AC6 15.03.05.16multi is vulnerable to Buffer Overflow in the formSetCfm function via the funcname, funcpara1, and funcpara2 parameters...

PT-2026-31339

Name of the Vulnerable Software and Affected Versions Tenda AC6 version 15.03.05.16 multi Description A buffer overflow exists in the formSetCfm function. This issue can be triggered through the funcname, funcpara1, and funcpara2 parameters. Recommendations At the moment, there is no information...

Tenda AC6 安全漏洞

Tenda AC6 is a wireless router produced by the Chinese company Tenda. The Tenda AC6 15.03.05.16multi version has a security vulnerability. This vulnerability stems from the improper handling of the funcname, funcpara1, and funcpara2 parameters by the formSetCfm function, which may lead to a buffe...

CVE-2025-52221

CVE-2025-52221 affects Tenda AC6 15.03.05.16_multi. The formSetCfm function is vulnerable to a buffer overflow when abusing funcname, funcpara1, and funcpara2 parameters. NVD records a CVSSv3.1 base score of 9.8 (CRITICAL) with NETWORK attack vector, no privileges required, no user interaction; c...

EUVD-2026-17247

A vulnerability has been found in Tenda CH22 1.0.0.1/1.If. The impacted element is the function fromSetCfm of the file /goform/setcfm of the component Parameter Handler. The manipulation of the argument funcname leads to stack-based buffer overflow. Remote exploitation of the attack is possible...

CVE-2026-5154

CVE-2026-5154 affects Tenda CH22 1.0.0.1. The vulnerability is in the Parameter Handler’s implementation of the function fromSetCfm in /goform/setcfm. Manipulating the funcname argument causes a stack-based buffer overflow, enabling remote exploitation. Public disclosure of the exploit indicates ...

CVE-2026-5154 Tenda CH22 Parameter setcfm fromSetCfm stack-based overflow

A vulnerability has been found in Tenda CH22 1.0.0.1/1.If. The impacted element is the function fromSetCfm of the file /goform/setcfm of the component Parameter Handler. The manipulation of the argument funcname leads to stack-based buffer overflow. Remote exploitation of the attack is possible...

CVE-2026-5154

A vulnerability has been found in Tenda CH22 1.0.0.1/1.If. The impacted element is the function fromSetCfm of the file /goform/setcfm of the component Parameter Handler. The manipulation of the argument funcname leads to stack-based buffer overflow. Remote exploitation of the attack is possible...

Tenda CH22 安全漏洞

The Tenda CH22 is a network device produced by the Chinese company Tenda. There is a security vulnerability in the version 1.0.0.1/1.If of the Tenda CH22. This vulnerability stems from incorrect operations on the parameter funcname in the functions fromSetCfm of the Component Parameter Handler fi...

CVE-2026-3677

A vulnerability was found in Tenda FH451 1.0.0.9. This impacts the function fromSetCfm of the file /goform/setcfm. The manipulation of the argument funcname/funcpara1 results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be use...