High severity8.8NVD Advisory· Published Apr 13, 2026· Updated Apr 22, 2026

CVE-2026-6199

Description

A vulnerability was found in Tenda F456 1.0.0.5. Impacted is the function fromqossetting of the file /goform/qossetting. The manipulation of the argument page results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/Litengzheng/vuldb_new/blob/main/F456/vul_116/README.mdnvd
vuldb.com/submit/797471nvd
vuldb.com/vuln/357121nvd
vuldb.com/vuln/357121/ctinvd
www.tenda.com.cnnvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000