Findings

CVE-2026-7034

A vulnerability was found in Tenda FH1202 1.2.0.14(408).

Published Apr 26, 2026 · updated Jun 17, 2026 · tenda fh1202 firmware

A vulnerability was found in Tenda FH1202 1.2.0.14(408). Affected by this issue is the function WrlExtraSet of the file /goform/WrlExtraSet of the component httpd. Performing a manipulation of the argument Go results in stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made public and could be used.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 26, 2026 · NIST NVD

    Detected

    A vulnerability was found in Tenda FH1202 1.2.0.14(408). Affected by this issue is the function WrlExtraSet of the file /goform/WrlExtraSet of the component httpd. Performing a manipulation of the argument Go results in stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made public and could be used.

  2. Jun 17, 2026 · NIST NVD

    Updated

    A vulnerability was found in Tenda FH1202 1.2.0.14(408). Affected by this issue is the function WrlExtraSet of the file /goform/WrlExtraSet of the component httpd. Performing a manipulation of the argument Go results in stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made public and could be used.

Affected

  • cpe tenda/fh1202 firmware1.2.0.14\(408\)

Sources

  • CVE.orgVulnerability recordCVE-2026-7034

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-7034

    A vulnerability was found in Tenda FH1202 1.2.0.14(408). Affected by this issue is the function WrlExtraSet of the file /goform/WrlExtraSet of the component httpd. Performing a manipulation of the argument Go results in stack-based buffer overflow. The attack may be initiated rem

    nvd.nist.gov

References

CVE-2026-7034 · ZeroDay Findings