A vulnerability labeled as critical has been found in Tenda F456 1.0.0.5. Impacted is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter of the component httpd. The manipulation of the argument page results in buffer overflow.

This vulnerability was named CVE-2026-7056. The attack may be performed from remote. In addition, an exploit is available.