Skip to main content

Tenda CVE-2026-6632

| EUVD-2026-23830 HIGH
Classic Buffer Overflow (CWE-120)
2026-04-20 VulDB
Buffer Overflow Tenda
7.4
CVSS 4.0
Share

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

7
Re-analysis Queued
Apr 22, 2026 - 20:37 vuln.today
cvss_changed
PoC Detected
Apr 22, 2026 - 20:22 vuln.today
Public exploit code
Analysis Generated
Apr 20, 2026 - 11:29 vuln.today
CVSS changed
Apr 20, 2026 - 11:22 NVD
8.8 (HIGH) 7.4 (HIGH)
EUVD ID Assigned
Apr 20, 2026 - 11:15 euvd
EUVD-2026-23830
Analysis Generated
Apr 20, 2026 - 11:15 vuln.today
CVE Published
Apr 20, 2026 - 11:00 nvd
HIGH 7.4

DescriptionNVD

A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958. The affected element is the function fromSafeClientFilter of the file /goform/SafeClientFilter of the component httpd. The manipulation of the argument menufacturer/Go leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

AnalysisAI

Buffer overflow in Tenda F451 router firmware 1.0.0.7_cn_svn7958 allows authenticated remote attackers to achieve complete compromise via the SafeClientFilter function. The httpd service improperly validates 'menufacturer' and 'Go' parameters, enabling memory corruption that leads to code execution with firmware-level privileges. …

Sign in for full analysis, threat intelligence, and remediation guidance.

RemediationAI

Within 24 hours: Identify and inventory all Tenda F451 devices running firmware 1.0.0.7_cn_svn7958 in production and development environments; restrict network access to these devices to trusted administrative personnel only. Within 7 days: Contact Tenda support to confirm patch availability timeline; evaluate firmware alternatives or device replacement options if patches remain unavailable. …

Sign in for detailed remediation steps.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Share

CVE-2026-6632 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy