Skip to main content

Tenda CVE-2026-5990

| EUVD-2026-21242 HIGH
Buffer Overflow (CWE-119)
2026-04-10 cna@vuldb.com
7.4
CVSS 4.0
Share

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

4
Re-analysis Queued
Apr 29, 2026 - 20:07 vuln.today
cvss_changed
EUVD ID Assigned
Apr 10, 2026 - 00:22 euvd
EUVD-2026-21242
Analysis Generated
Apr 10, 2026 - 00:22 vuln.today
CVE Published
Apr 10, 2026 - 00:16 nvd
HIGH 7.4

DescriptionNVD

A vulnerability has been found in Tenda F451 1.0.0.7. Affected by this vulnerability is the function fromSafeEmailFilter of the file /goform/SafeEmailFilter. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

Stack-based buffer overflow in Tenda F451 router firmware version 1.0.0.7 allows authenticated remote attackers to execute arbitrary code or cause denial of service via crafted 'page' parameter in the fromSafeEmailFilter function at /goform/SafeEmailFilter endpoint. Publicly available exploit code exists. …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: Identify all Tenda F451 routers in your environment and document firmware versions via admin interface or device inventory tools. Within 7 days: Contact Tenda support for firmware update availability and interim mitigations; restrict admin access to trusted personnel only and disable remote management if enabled. …

Sign in for detailed remediation steps.

Share

CVE-2026-5990 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy