EUVD-2026-21238
GHSA-wmj6-9qv3-c38f
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate to Tenda F451 device
-
DeliverySend crafted request to /goform/AdvSetWrlsafeset
-
ExploitInject oversized mit_ssid parameter
-
ExecutionOverflow stack buffer
-
ImpactExecute arbitrary code with root privileges
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, buffer size validation
MITRE ATT&CK
2 techniques across 2 tactics: Execution, Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires authenticated access to Tenda F451 router firmware version 1.0.0.7. Attacker must be an authenticated user capable of accessing the /goform/AdvSetWrlsafeset endpoint and manipulate the mit_ssid parameter to trigger stack-based buffer overflow. |
| Impact | Stack buffer overflow in Tenda F451 router management interface requires authenticated access but achieves high confidentiality/integrity impact. CVSS 7.4 reflects significant risk. Public exploit availability and low complexity raise operational priority for organizations running vulnerable firmware versions, though authentication barrier limits mass exploitation scope. |
| Exploit ScenarioDerived | Authenticated attacker submits oversized mit_ssid parameter to /goform/AdvSetWrlsafeset endpoint, triggering stack overflow in formWrlsafeset function. Publicly available exploit code enables remote code execution with router privileges. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Apr 09, 2026
Stack-based buffer overflow in Tenda F451 wireless router firmware 1.0.0.7 enables authenticated remote attackers to execute arbitrary code via crafted mit_ssid parameter to formWrlsafeset function in /goform/AdvSetWrlsafeset endpoint. Publicly available exploit code exists. Attack requires low-privilege authenticated access to the router's web management interface, resulting in complete compromise of device confidentiality, integrity, and availability with no impact to other network segments.
RemediationAI
No vendor-released patch identified at time of analysis. Tenda has not published security advisories addressing CVE-2026-5988 per manufacturer website https://www.tenda.com.cn/. Immediate mitigations: (1) disable remote management access to administrative interface, restrict access to trusted local network segments only; (2) implement network segmentation isolating F451 devices from critical infrastructure; (3) monitor authentication logs for unauthorized access attempts to /goform endpoints; (4) consider device replacement with actively supported hardware if vendor does not release firmware update. Vulnerability details: https://vuldb.com/vuln/356542 and proof-of-concept: https://github.com/Jimi-Lab/cve/issues/4. Contact Tenda technical support for patch availability status.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Insufficient input validation in formWrlsafeset wireless security configuration handler allows stack memory corruption through oversized mit_ssid parameter. CWE-119 memory buffer error permits direct manipulation of return addresses and execution flow. Affects CPE cpe:2.3:o:tenda:f451_firmware:1.0.0.7:*:*:*:*:*:*:*. CVSS vector PR:L indicates authenticated exploitation requirement; no local attack complexity.
Know when F451 Firmware gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Primary rating from Vendor (vuldb) · only source for this CVE.
CVSS VectorVendor: vuldb
DescriptionCVE.org
A vulnerability was detected in Tenda F451 1.0.0.7. This impacts the function formWrlsafeset of the file /goform/AdvSetWrlsafeset. Performing a manipulation of the argument mit_ssid results in stack-based buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.
Executive ViewAI
CVE-2026-5988 is a stack-based buffer overflow in Tenda F451 wireless router firmware 1.0.0.7 that allows authenticated users with low-privilege access to execute arbitrary code and gain complete control of the device. Organizations deploying this router model face direct compromise of their network gateway, enabling attackers to intercept traffic, inject malicious content, or pivot into internal networks-requiring immediate identification and remediation of affected devices.
No vendor-released patch identified at time of analysis. Interim mitigations: (1) Disable HTTP/HTTPS management interface and allow administration only via physical console access; (2) Implement strict IP allowlisting on management ports at network perimeter; (3) Enforce strong authentication (change default credentials immediately) and monitor management interface logs for unauthorized access attempts; (4) Isolate affected routers on a dedicated VLAN separate from critical systems and user networks; (5) Deploy network intrusion detection rules targeting exploitation patterns in /goform/AdvSetWrlsafeset requests with mit_ssid parameter anomalies.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
More in F451 Firmware
View allRemote code execution in Tenda FH451 firmware via stack-based buffer overflow in the QuickIndex function allows unauthen
Stack-based buffer overflow in Tenda F451 router firmware 1.0.0.7_cn_svn7958 allows authenticated remote attackers to ac
Stack-based buffer overflow in Tenda F451 router (version 1.0.0.7) enables authenticated remote attackers to execute arb
Stack-based buffer overflow in Tenda F451 wireless router firmware 1.0.0.7 allows authenticated remote attackers to exec
Stack-based buffer overflow in Tenda F451 router firmware version 1.0.0.7 allows authenticated remote attackers to execu
Exploit-DB