Skip to main content

Tenda CVE-2026-6124

| EUVD-2026-21726 HIGH
Stack-based Buffer Overflow (CWE-121)
2026-04-12 VulDB GHSA-hjj3-4fc4-rhvw
7.4
CVSS 4.0
Share

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

7
Re-analysis Queued
Apr 29, 2026 - 20:07 vuln.today
cvss_changed
PoC Detected
Apr 29, 2026 - 19:54 vuln.today
Public exploit code
CVSS changed
Apr 12, 2026 - 09:22 NVD
8.8 (HIGH) 7.4 (HIGH)
Analysis Generated
Apr 12, 2026 - 09:21 vuln.today
EUVD ID Assigned
Apr 12, 2026 - 09:15 euvd
EUVD-2026-21726
Analysis Generated
Apr 12, 2026 - 09:15 vuln.today
CVE Published
Apr 12, 2026 - 09:00 nvd
HIGH 7.4

DescriptionNVD

A vulnerability was determined in Tenda F451 1.0.0.7. This vulnerability affects the function fromSafeMacFilter of the file /goform/SafeMacFilter of the component httpd. Executing a manipulation of the argument page/menufacturer can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.

AnalysisAI

Stack-based buffer overflow in Tenda F451 router firmware 1.0.0.7 allows authenticated remote attackers to achieve complete system compromise via the SafeMacFilter function. The vulnerability is exploitable over the network with low complexity, requiring only basic user credentials. …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: Identify and inventory all Tenda F451 devices running firmware 1.0.0.7 using network scanning tools; immediately revoke or rotate credentials for any administrative accounts with router access. Within 7 days: Isolate affected Tenda F451 devices to segregated network segments with restricted access controls; check Tenda security advisories for firmware updates beyond 1.0.0.7. …

Sign in for detailed remediation steps.

Share

CVE-2026-6124 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy