Which versions of Tenda are affected by CVE-2026-6122?

Tenda F451 routers running version 1.0.0.7 contain a critical stack-based buffer overflow in the web interface that allows authenticated attackers to execute arbitrary code and achieve complete…

Is there a public PoC exploit available for CVE-2026-6122?

Yes, a public proof-of-concept exploit is available for CVE-2026-6122. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-6122?

Within 24 hours: Identify all Tenda F451 devices running version 1.0.0.7 in your network using asset management tools. Within 7 days: Restrict network access to the web interface (port 80/443) to trusted administrative networks only via firewall rules; disable remote management features if enabled; change all default and privileged credentials. Within 30 days: Contact Tenda for patch availability status; evaluate replacement with patched firmware version or alternative router models with active vendor support; monitor for CVE-2026-6122 exploitation indicators in network logs.

Tenda CVE-2026-6122

Q: What is the CVSS score of CVE-2026-6122?

CVE-2026-6122 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-21722 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-04-12 VulDB

Tenda Stack Overflow Buffer Overflow

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 29, 2026 - 20:07 vuln.today

cvss_changed

PoC Detected

Apr 29, 2026 - 20:01 vuln.today

Public exploit code

CVSS changed

Apr 12, 2026 - 08:22 NVD

8.8 (HIGH) 7.4 (HIGH)

Analysis Generated

Apr 12, 2026 - 08:05 vuln.today

EUVD ID Assigned

Apr 12, 2026 - 08:00 euvd

EUVD-2026-21722

Analysis Generated

Apr 12, 2026 - 08:00 vuln.today

CVE Published

Apr 12, 2026 - 07:30 nvd

HIGH 7.4

DescriptionCVE.org

A vulnerability has been found in Tenda F451 1.0.0.7. Affected by this issue is the function frmL7ProtForm of the file /goform/L7Prot of the component httpd. Such manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

AnalysisAI

Stack-based buffer overflow in Tenda F451 router version 1.0.0.7 allows authenticated remote attackers to execute arbitrary code with high impact to confidentiality, integrity, and availability. The vulnerability resides in the httpd component's frmL7ProtForm function when processing the 'page' parameter in /goform/L7Prot. Publicly available exploit code exists (GitHub POC published), enabling attackers with low-privilege credentials to achieve full system compromise. CVSS 8.8 (High) with low attack complexity and no user interaction required. No vendor-released patch identified at time of analysis.

Technical ContextAI

The vulnerability exists in Tenda F451 wireless router firmware 1.0.0.7, specifically in the httpd web server component that handles HTTP-based administrative requests. The frmL7ProtForm function in the /goform/L7Prot endpoint fails to properly validate the length of the 'page' parameter before copying it to a fixed-size stack buffer. This is a classic CWE-121 (Stack-based Buffer Overflow) condition where attacker-controlled input exceeds allocated buffer boundaries, overwriting adjacent stack memory including return addresses and local variables. The affected CPE is cpe:2.3:a:tenda:f451:*:*:*:*:*:*:*:*, confirming this is a firmware-level vulnerability in the embedded web management interface. Stack-based overflows in router firmware are particularly dangerous as they typically execute in privileged kernel or root context, granting attackers complete control over the network device.

RemediationAI

No vendor-released patch identified at time of analysis. Users should monitor Tenda's official security advisory channels (https://www.tenda.com.cn/) for firmware updates addressing CVE-2026-6122. Immediate risk reduction measures include: change all default administrative credentials to strong unique passwords to raise the authentication barrier (mitigating PR:L condition), disable remote management interfaces if not operationally required to eliminate network attack surface (converting AV:N to AV:A), implement network segmentation isolating Tenda F451 devices from trusted networks using firewall rules, and consider replacing affected hardware with alternative products if vendor does not release timely patches. Organizations should audit for exposed F451 devices using network scanning and prioritize replacement given Tenda's inconsistent security update track record for consumer-grade equipment. Document CVE-2026-6122 in risk registers if devices cannot be immediately replaced.