CVE-2026-7054 | Tenda F456 1.0.0.5 httpd /goform/PPTPDClient fromPptpUserAdd opttype/usernamewith buffer overflow

April 26, 2026 Yanac

A vulnerability categorized as critical has been discovered in Tenda F456 1.0.0.5. This vulnerability affects the function fromPptpUserAdd of the file /goform/PPTPDClient of the component httpd. Executing a manipulation of the argument opttype/usernamewith can lead to buffer overflow.

This vulnerability is handled as CVE-2026-7054. The attack can be executed remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More