The vulnerability CVE-2026-7031 exists in Tenda F456 firmware version 1.0.0.5. It arises from improper handling of the 'page' argument in the fromSafeMacFilter function within the /goform/SafeMacFilter endpoint, leading to a buffer overflow condition. This flaw allows remote attackers to potentially execute arbitrary code or cause denial of service. The CVSS 4.0 base score is 8.7, reflecting high impact and ease of exploitation with no privileges or user interaction required. No official fix or patch has been documented, and the exploit code is publicly available.

Successful exploitation of this vulnerability could allow remote attackers to cause a buffer overflow, potentially leading to arbitrary code execution or denial of service on affected devices running Tenda F456 1.0.0.5. The vulnerability requires no user interaction and can be triggered remotely, increasing its risk. However, there are no confirmed reports of exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting network exposure of the affected device, such as restricting access to the management interface from untrusted networks. Monitor vendor channels for updates and apply patches promptly once available.