Which versions of Tenda are affected by CVE-2026-6134?

Tenda F451 router firmware version 1.0.0.7_cn_svn7958 contains a stack-based buffer overflow vulnerability (CVE-2026-6134) that allows authenticated remote attackers to execute arbitrary code,…

Is there a public PoC exploit available for CVE-2026-6134?

Yes, a public proof-of-concept exploit is available for CVE-2026-6134. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-6134?

Within 24 hours: Identify all Tenda F451 devices running firmware 1.0.0.7_cn_svn7958 across your network using network inventory tools. Within 7 days: Implement network segmentation to restrict administrative access to affected routers and enforce strong authentication on all router management interfaces; check Tenda security advisories for available firmware updates beyond current version. Within 30 days: Plan replacement or upgrade of Tenda F451 devices to vendor-supported models with confirmed patch availability; document all affected devices and their network locations for remediation tracking.

Tenda CVE-2026-6134

Q: What is the CVSS score of CVE-2026-6134?

CVE-2026-6134 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-21752 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-04-12 VulDB

GHSA-mfv2-j96x-vw56

Tenda Stack Overflow Buffer Overflow

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

PoC Detected

Apr 30, 2026 - 12:37 vuln.today

Public exploit code

Analysis Generated

Apr 12, 2026 - 23:26 vuln.today

CVSS changed

Apr 12, 2026 - 23:22 NVD

8.8 (HIGH) 7.4 (HIGH)

EUVD ID Assigned

Apr 12, 2026 - 23:15 euvd

EUVD-2026-21752

Analysis Generated

Apr 12, 2026 - 23:15 vuln.today

CVE Published

Apr 12, 2026 - 23:00 nvd

HIGH 7.4

DescriptionCVE.org

A security flaw has been discovered in Tenda F451 1.0.0.7_cn_svn7958. This vulnerability affects the function fromqossetting of the file /goform/qossetting. Performing a manipulation of the argument qos results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.

AnalysisAI

Stack-based buffer overflow in Tenda F451 router firmware version 1.0.0.7_cn_svn7958 allows remote authenticated attackers to execute arbitrary code with high impact on confidentiality, integrity, and availability. The vulnerability resides in the fromqossetting function's handling of the 'qos' parameter in /goform/qossetting endpoint. Publicly available exploit code (GitHub PoC) significantly lowers the barrier to exploitation. CVSS 7.4 (High) with low attack complexity and network attack vector indicates elevated risk for exposed devices, though low-privilege authentication is required.

Technical ContextAI

This vulnerability affects the QoS (Quality of Service) configuration interface in Tenda F451 wireless router firmware. The flaw is a classic stack-based buffer overflow (CWE-121) occurring in the fromqossetting function when processing user-supplied 'qos' parameter data via the /goform/qossetting endpoint. Stack-based buffer overflows occur when a program writes more data to a buffer located on the stack than allocated, potentially overwriting adjacent memory including return addresses and function pointers. In embedded router firmware like Tenda F451, these vulnerabilities often arise from unsafe string handling functions (strcpy, sprintf) without proper bounds checking. The affected CPE (cpe:2.3:a:tenda:f451:*:*:*:*:*:*:*:*) identifies Tenda F451 routers running the specific firmware build 1.0.0.7_cn_svn7958. The web management interface processes HTTP requests to /goform/ endpoints, common in Tenda router architectures, where inadequate input validation allows malicious payloads to corrupt stack memory and redirect execution flow.

RemediationAI

No vendor-released patch identified at time of analysis based on available data sources. Users should immediately check the official Tenda support portal (https://www.tenda.com.cn/) for firmware updates addressing CVE-2026-6134 or stack buffer overflow vulnerabilities in the QoS configuration module. As interim risk mitigation measures: restrict administrative interface access to trusted networks only by disabling remote management features and implementing strict firewall rules blocking external access to TCP ports 80/443; change default administrative credentials to strong unique passwords exceeding 16 characters; disable QoS functionality if not operationally required; monitor router logs for suspicious /goform/qossetting access attempts; consider replacing the device with alternative hardware if Tenda does not release security updates within reasonable timeframes. Network segmentation should isolate the vulnerable router from critical assets. Reference the public exploit disclosure at https://github.com/Jimi-Lab/cve/issues/18 to understand attack indicators and develop detection signatures for intrusion detection systems.