CVE-2026-7035
A vulnerability was determined in Tenda FH1202 1.2.0.14. This affects the function fromWrlclientSet of the file /goform/WrlclientSet of the component httpd. Executing a manipulation of the argument Go can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Published:Apr 26, 2026
Last Modified:Apr 30, 2026
EPS:Apr 26, 2026
EPSS Score:0.00046
CVSS Score:8.8
Affected Products
Vendor
Product
Action
Vendor
Tenda
Product
Fh1202
Tenda
Fh1202
Vendor
Tenda
Product
Fh1202 Firmware
Tenda
Fh1202 Firmware
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
