What is the CVSS score of CVE-2026-36786?

CVE-2026-36786 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.8%.

Which versions of Tenda FH451 are affected by CVE-2026-36786?

Tenda FH451 router firmware V1.0.0.9 is vulnerable to remote denial-of-service attacks from unauthenticated sources, allowing attackers to crash the device and disrupt network operations.

How to fix or mitigate CVE-2026-36786?

Within 24 hours: Inventory all Tenda FH451 routers running firmware V1.0.0.9; restrict network access from untrusted sources. Within 7 days: Implement firewall rules to block HTTP requests containing the list1 parameter targeting the fromDhcpListClient function, or isolate affected devices to trusted networks only. Within 30 days: Contact Tenda for patch availability and timeline; develop hardware replacement plan if patch remains unavailable.

Tenda FH451 CVE-2026-36786

EUVD-2026-35118 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-06-08 mitre

GHSA-5jh4-mg5m-84h8

Denial Of Service Tenda Stack Overflow Buffer Overflow

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jun 08, 2026 - 19:26 vuln.today

CVSS changed

Jun 08, 2026 - 19:22 NVD

7.5 (HIGH)

CVE Published

Jun 08, 2026 - 00:00 nvd

UNKNOWN (no severity yet)

DescriptionCVE.org

Shenzhen Tenda Technology Co., Ltd Tenda FH451 V1.0.0.9 was discovered to contain a stack overflow in the list1 parameter of the fromDhcpListClient function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

AnalysisAI

Denial of service in Tenda FH451 router firmware V1.0.0.9 allows remote unauthenticated attackers to crash the device by sending a crafted HTTP request that triggers a stack overflow in the list1 parameter of the fromDhcpListClient function. Publicly available exploit code exists in a GitHub research repository, though the vulnerability is not listed in CISA KEV and no EPSS score has been published at time of analysis. Impact is limited to availability - no confidentiality or integrity loss is indicated.

Technical ContextAI

The Tenda FH451 is a small office/home office (SOHO) wired router, and the affected fromDhcpListClient routine is part of its web management interface, which exposes DHCP client list handling over HTTP. The root cause is CWE-121 (Stack-based Buffer Overflow): the list1 query/POST parameter is copied into a fixed-size stack buffer without adequate bounds checking, so an oversized value corrupts the call stack and crashes the httpd process. This pattern is recurrent across Tenda's MIPS-based residential firmware family, where multiple form-handler functions historically lack length validation on user-controlled HTTP parameters.

RemediationAI

No vendor-released patch identified at time of analysis - Shenzhen Tenda has not published an advisory or fixed firmware build referenced in the provided intelligence, so administrators should monitor https://www.tendacn.com for an updated FH451 firmware image superseding V1.0.0.9. As compensating controls, restrict access to the router's HTTP management interface to a trusted management VLAN or specific admin IPs (most FH-series devices expose this on LAN by default but support ACLs), and ensure remote/WAN-side web administration is disabled - the trade-off is loss of off-LAN management convenience. Where feasible, place the device behind an upstream firewall that blocks unsolicited HTTP/HTTPS to the router's management port, and consider replacement with a supported model if no firmware update materializes, since EOL SOHO routers commonly accumulate similar form-handler overflows.