CVE-2026-9389 in F456

Resumen

por MITRE • 2026-05-26

A security vulnerability has been detected in Tenda F456 1.0.0.5. This affects the function frmL7ImForm of the file /goform/L7Im. The manipulation of the argument page leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsable: VulDB
• Divulgación: 2026-05-26
• Moderación: aceptado
• Artículo: VDB-365352
• CPE: listo
• CWE: CWE-120 (confirmado)
• Explotación: Descargar
• CVSS: 8.8 (VulDB)
• EPSS: 0.00048
• KEV: no
• Actividades: muy bajo
• Sector: Telecommunication, Transportation, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-9389
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-9389
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-9389/