EUVD-2026-21242Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate to Tenda F451 device
-
DeliverySend crafted HTTP request to /goform/SafeEmailFilter
-
ExploitInject oversized page parameter
-
ExecutionTrigger stack-based buffer overflow
-
ImpactExecute arbitrary code on device
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, buffer size validation
MITRE ATT&CK
2 techniques across 2 tactics: Execution, Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires authenticated access to Tenda F451 router version 1.0.0.7. Attacker must be logged into the device web interface to manipulate the 'page' parameter in the /goform/SafeEmailFilter endpoint. |
| Impact | CVSS 7.4 reflects high confidentiality and integrity impact. Authenticated remote network access required, but low complexity exploitation with publicly available proof-of-concept code significantly lowers operational barriers. Stack overflow in router firmware creates persistent device compromise risk. Priority justified by disclosure maturity and authentication requirement being easily bypassed in many Tenda deployments via default credentials. |
| Exploit ScenarioDerived | Attacker authenticates to Tenda F451 web interface (default credentials common), sends malicious 'page' parameter to /goform/SafeEmailFilter endpoint triggering stack-based buffer overflow. Publicly available exploit code enables code execution with device privileges; no user interaction required. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Apr 10, 2026
Stack-based buffer overflow in Tenda F451 router firmware version 1.0.0.7 allows authenticated remote attackers to execute arbitrary code or cause denial of service via crafted 'page' parameter in the fromSafeEmailFilter function at /goform/SafeEmailFilter endpoint. Publicly available exploit code exists. Attack requires low-privilege authentication but no user interaction, enabling complete compromise of device confidentiality, integrity, and availability.
RemediationAI
No vendor-released patch identified at time of analysis. Tenda has not published a security advisory or updated firmware for F451 addressing this vulnerability per available references. Recommended immediate mitigations: disable remote administrative access to /goform endpoints, restrict router management interface to trusted internal networks only, implement network-level access controls blocking external access to administrative functions. Monitor vendor site https://www.tenda.com.cn/ for future firmware updates. Consider replacing device if vendor does not release patch within acceptable risk timeframe. Technical details and proof-of-concept available at https://github.com/Jimi-Lab/cve/issues/8 and https://vuldb.com/vuln/356544 for validation testing in isolated environments.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
CWE-119 memory corruption vulnerability in SafeEmailFilter email filtering module. Insufficient bounds checking on user-supplied 'page' parameter enables stack memory overwrite. CVSS vector PR:L indicates low-privilege authentication requirement; network-accessible attack surface (AV:N) with low complexity (AC:L) exploitation. CPE would be cpe:2.3:o:tenda:f451_firmware:1.0.0.7.
Know when F451 Firmware gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Primary rating from Vendor (vuldb) · only source for this CVE.
CVSS VectorVendor: vuldb
DescriptionCVE.org
A vulnerability has been found in Tenda F451 1.0.0.7. Affected by this vulnerability is the function fromSafeEmailFilter of the file /goform/SafeEmailFilter. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Executive ViewAI
CVE-2026-5990 is a stack-based buffer overflow in Tenda F451 routers (firmware 1.0.0.7) that allows authenticated users to execute arbitrary code or disable the device entirely. Any user with router access credentials can trigger this vulnerability without additional interaction, creating a direct path to full device compromise. Organizations using these routers should assume internal network access can lead to complete router takeover.
No vendor-released patch identified at time of analysis. Interim mitigations: (1) Restrict administrative access to router interface via strong, unique credentials and access lists; (2) Disable WAN-accessible management interfaces and limit admin access to trusted internal networks only; (3) Implement network segmentation to isolate router management traffic; (4) Monitor router logs for suspicious authentication or /goform/SafeEmailFilter requests; (5) Monitor for firmware updates from Tenda and apply immediately when released.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
Related Vulnerabilities in Tenda F451 Buffer Overflow Vulnerabilities
View all 3More in F451 Firmware
View allRemote code execution in Tenda FH451 firmware via stack-based buffer overflow in the QuickIndex function allows unauthen
Stack-based buffer overflow in Tenda F451 router firmware 1.0.0.7_cn_svn7958 allows authenticated remote attackers to ac
Stack-based buffer overflow in Tenda F451 wireless router firmware 1.0.0.7 enables authenticated remote attackers to exe
Exploit-DB