The vulnerability CVE-2026-7031 affects Tenda F456 firmware version 1.0.0.5 and is caused by a buffer overflow in the fromSafeMacFilter function when processing the 'page' argument. This vulnerability can be triggered remotely, allowing an attacker to potentially execute arbitrary code or cause denial of service. The CVSS 4.0 base score is 8.7, reflecting high severity with network attack vector, low attack complexity, no required privileges or user interaction, and high impact on confidentiality, integrity, and availability. No official patch or fix has been disclosed, and the exploit code is publicly available.

Successful exploitation of this buffer overflow vulnerability could allow remote attackers to execute arbitrary code or disrupt the device's normal operation, impacting confidentiality, integrity, and availability of the affected device. The vulnerability does not require user interaction or privileges, increasing its risk. However, there are no confirmed reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting network exposure of the affected device and monitor for any updates from Tenda regarding patches or mitigations.