A vulnerability identified as critical has been detected in Tenda F456 1.0.0.5. This issue affects the function fromVirtualSer of the file /goform/VirtualSer of the component httpd. The manipulation of the argument menufacturer/Go leads to buffer overflow.

This vulnerability is uniquely identified as CVE-2026-7055. The attack is possible to be carried out remotely. Moreover, an exploit is present.