A vulnerability categorized as critical has been discovered in Tenda F456 1.0.0.5. Impacted is the function
fromqossetting of the file /goform/qossetting. The manipulation of the argument page results in stack-based buffer overflow.
This vulnerability is known as CVE-2026-6199. It is possible to launch the attack remotely. Furthermore, an exploit is available.