Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-7054

Tenda F456 httpd PPTPDClient fromPptpUserAdd buffer overflow

Description

A weakness has been identified in Tenda F456 1.0.0.5. This vulnerability affects the function fromPptpUserAdd of the file /goform/PPTPDClient of the component httpd. Executing a manipulation of the argument opttype/usernamewith can lead to buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenda F456

  • 1.0.0.5affected

References