Skip to main content

Tenda CVE-2026-6631

| EUVD-2026-23828 HIGH
Classic Buffer Overflow (CWE-120)
2026-04-20 VulDB GHSA-2836-hmqw-wf98
Buffer Overflow Tenda
7.4
CVSS 4.0
Share

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

7
Re-analysis Queued
Apr 22, 2026 - 20:37 vuln.today
cvss_changed
PoC Detected
Apr 22, 2026 - 20:22 vuln.today
Public exploit code
Analysis Generated
Apr 20, 2026 - 11:29 vuln.today
CVSS changed
Apr 20, 2026 - 11:22 NVD
8.8 (HIGH) 7.4 (HIGH)
EUVD ID Assigned
Apr 20, 2026 - 11:15 euvd
EUVD-2026-23828
Analysis Generated
Apr 20, 2026 - 11:15 vuln.today
CVE Published
Apr 20, 2026 - 10:45 nvd
HIGH 7.4

DescriptionNVD

A vulnerability was determined in Tenda F451 1.0.0.7_cn_svn7958. Impacted is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter of the component httpd. Executing a manipulation of the argument page can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

AnalysisAI

Buffer overflow in Tenda F451 router (version 1.0.0.7_cn_svn7958) allows authenticated remote attackers to achieve arbitrary code execution with high impact on confidentiality, integrity, and availability. The vulnerability exists in the httpd component's webExcptypemanFilter function, exploitable via malicious 'page' parameter input to /goform/webExcptypemanFilter. …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: Identify all Tenda F451 devices running firmware 1.0.0.7_cn_svn7958 in your network using asset management or network scanning tools. Within 7 days: Isolate affected devices on a segregated network segment with strict access controls; document business justification for any devices that cannot be immediately replaced. …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Share

CVE-2026-6631 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy