EUVD-2026-21244
GHSA-rv6j-fg2j-q2fj
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate to Tenda F451 router
-
DeliveryAccess /goform/WrlExtraSet endpoint
-
ExploitSend crafted GO parameter
-
ExecutionTrigger stack-based buffer overflow
-
ImpactExecute arbitrary code with router privileges
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, buffer size validation
MITRE ATT&CK
2 techniques across 2 tactics: Execution, Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires authenticated access to Tenda F451 router running firmware version 1.0.0.7. Attacker must send a crafted request with malicious 'GO' parameter to /goform/WrlExtraSet endpoint. No victim interaction needed. |
| Impact | CVSS 7.4 reflects high confidentiality and integrity impact via network-accessible stack overflow in router firmware. Authenticated access requirement (PR:L) limits blast radius to users with valid credentials. Moderate observed exploitation activity. Public exploit code exists but exploitation requires prior authentication, reducing real-world risk versus unauthenticated flaws. Prioritize patching in environments with untrusted internal users. |
| Exploit ScenarioDerived | Attacker with valid Tenda F451 credentials sends crafted HTTP request to /goform/WrlExtraSet with oversized GO parameter, triggering stack overflow in formWrlExtraSet function. Public exploit code available enables remote code execution or device compromise. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Apr 10, 2026
Stack-based buffer overflow in Tenda F451 wireless router firmware 1.0.0.7 allows authenticated remote attackers to execute arbitrary code or crash the device via crafted GO parameter to the formWrlExtraSet function in /goform/WrlExtraSet endpoint. The vulnerability permits complete compromise of device confidentiality and integrity. Publicly available exploit code exists. Attack requires low-privilege authenticated access to the web management interface.
RemediationAI
No vendor-released patch identified at time of analysis. Tenda has not published security advisories addressing CVE-2026-5991 on their official site (https://www.tenda.com.cn/). Affected organizations should immediately restrict administrative interface access to trusted management networks only, disable remote administration features, and implement network segmentation to isolate vulnerable devices. Monitor vendor security bulletins at https://www.tenda.com.cn/ for future firmware updates. Consider replacing end-of-life networking equipment with actively maintained alternatives if vendor support is discontinued. Detailed technical analysis and exploit proof-of-concept available at https://github.com/Jimi-Lab/cve/issues/9 and https://vuldb.com/vuln/356545.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
CWE-119 memory corruption occurs in formWrlExtraSet function when processing the GO parameter without proper bounds checking, enabling stack memory overwrite. The vulnerability exists in the wireless extra settings handler of the router's web management interface (CPE:2.3:o:tenda:f451_firmware:1.0.0.7).
Know when F451 Firmware gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Primary rating from Vendor (vuldb) · only source for this CVE.
CVSS VectorVendor: vuldb
DescriptionCVE.org
A vulnerability was found in Tenda F451 1.0.0.7. Affected by this issue is the function formWrlExtraSet of the file /goform/WrlExtraSet. The manipulation of the argument GO results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used.
Executive ViewAI
Tenda F451 wireless router firmware 1.0.0.7 contains a stack-based buffer overflow in the web management interface that allows authenticated attackers to execute arbitrary code or disable the device. Organizations deploying this router model face potential compromise of network access controls and device integrity, enabling lateral movement or persistent remote access within managed networks.
No vendor-released patch identified at time of analysis. Interim mitigations: (1) Restrict web management interface access to trusted administrative networks only via firewall rules; (2) disable remote management access (disable WAN-side access to port 80/443); (3) enforce strong administrative credentials and change default passwords immediately; (4) isolate affected routers to dedicated management VLANs; (5) monitor router logs for exploitation attempts; (6) consider temporary replacement with alternative vendor equipment if firmware patches are not released within 30 days.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
Related Vulnerabilities in Tenda F451 Buffer Overflow Vulnerabilities
View all 3More in F451 Firmware
View allRemote code execution in Tenda FH451 firmware via stack-based buffer overflow in the QuickIndex function allows unauthen
Stack-based buffer overflow in Tenda F451 router firmware 1.0.0.7_cn_svn7958 allows authenticated remote attackers to ac
Stack-based buffer overflow in Tenda F451 wireless router firmware 1.0.0.7 enables authenticated remote attackers to exe
Exploit-DB