LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →

CVE-2026-6200 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: April 13, 2026

Tenda F456 - Buffer Overflow

Published: April 13, 2026Updated: April 13, 2026Remote Exploitable

Overview

Tenda F456 1.0.0.5 contains a buffer overflow caused by manipulation of the "menufacturer/Go" argument in /goform/webtypelibrary, letting remote attackers cause a stack-based buffer overflow, exploit requires no special conditions.

Severity & Score

Severity: High
CVSS Score: 8.8
EPSS Score: 0.0%(Probability of exploitation in next 30 days)

Impact

Remote attackers can cause a stack-based buffer overflow, potentially leading to remote code execution or system crash.

Mitigation

Update to the latest version.

Social Media Activity(2 posts)

TheHackerWire
TheHackerWire
@thehackerwire
Apr 13, 2026

🟠 CVE-2026-6200 - High (8.8) A vulnerability was determined in Tenda F456 1.0.0.5. The affected element is the function formwebtypelibrary of the file /goform/webtypelibrary. This manipulation of the argument menufacturer/Go causes stack-based buffer overflow. The attack can ... šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-6200/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post
TheHackerWire
TheHackerWire
@thehackerwire
Apr 13, 2026

🟠 CVE-2026-6200 - High (8.8) A vulnerability was determined in Tenda F456 1.0.0.5. The affected element is the function formwebtypelibrary of the file /goform/webtypelibrary. This manipulation of the argument menufacturer/Go causes stack-based buffer overflow. The attack can ... šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-6200/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Details

CVE ID
CVE-2026-6200
Severity
High
CVSS Score
8.8
Type
buffer_overflow
Status
new
EPSS
0.0%
Social Posts
2

CWE

  • CWE-119

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.0%Probability of exploitation in the next 30 days