Which versions of Tenda are affected by EUVD-2026-23830?

Tenda F451 router firmware version 1.0.0.7_cn_svn7958 contains a critical buffer overflow vulnerability in the httpd service that allows authenticated users to execute arbitrary code with…

Is there a public PoC exploit available for EUVD-2026-23830?

Yes, a public proof-of-concept exploit is available for EUVD-2026-23830. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate EUVD-2026-23830?

Within 24 hours: Identify and inventory all Tenda F451 devices running firmware 1.0.0.7_cn_svn7958 in production and development environments; restrict network access to these devices to trusted administrative personnel only. Within 7 days: Contact Tenda support to confirm patch availability timeline; evaluate firmware alternatives or device replacement options if patches remain unavailable. Within 30 days: Implement network segmentation to isolate affected routers from critical systems; deploy enhanced monitoring on any remaining F451 devices for suspicious administrative access patterns; document remediation completion status.

Tenda EUVD-2026-23830

Q: What is the CVSS score of EUVD-2026-23830?

EUVD-2026-23830 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-6632 HIGH

Classic Buffer Overflow (CWE-120)

2026-04-20 VulDB

Tenda Buffer Overflow

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 22, 2026 - 20:37 vuln.today

cvss_changed

PoC Detected

Apr 22, 2026 - 20:22 vuln.today

Public exploit code

Analysis Generated

Apr 20, 2026 - 11:29 vuln.today

CVSS changed

Apr 20, 2026 - 11:22 NVD

8.8 (HIGH) 7.4 (HIGH)

EUVD ID Assigned

Apr 20, 2026 - 11:15 euvd

EUVD-2026-23830

Analysis Generated

Apr 20, 2026 - 11:15 vuln.today

CVE Published

Apr 20, 2026 - 11:00 nvd

HIGH 7.4

DescriptionCVE.org

A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958. The affected element is the function fromSafeClientFilter of the file /goform/SafeClientFilter of the component httpd. The manipulation of the argument menufacturer/Go leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

AnalysisAI

Buffer overflow in Tenda F451 router firmware 1.0.0.7_cn_svn7958 allows authenticated remote attackers to achieve complete compromise via the SafeClientFilter function. The httpd service improperly validates 'menufacturer' and 'Go' parameters, enabling memory corruption that leads to code execution with firmware-level privileges. A public exploit (GitHub PoC) exists, but no CISA KEV listing indicates exploitation remains proof-of-concept rather than widespread. EPSS data unavailable; CVSS 7.4 reflects network attack vector with low complexity, though low-privilege authentication is required.

Technical ContextAI

Tenda F451 is a consumer-grade wireless router. The vulnerability resides in httpd, the embedded HTTP daemon handling web-based router administration. The affected function fromSafeClientFilter processes client filtering requests at the /goform/SafeClientFilter endpoint. CWE-120 indicates a classic buffer overflow - the code fails to validate length when copying user-supplied 'menufacturer' or 'Go' parameter values into fixed-size stack or heap buffers. In embedded firmware contexts, successful buffer overflows often bypass ASLR/DEP protections absent in resource-constrained devices, enabling direct control flow hijacking. The CPE cpe:2.3:a:tenda:f451 confirms Tenda F451 as the affected product family; version wildcard (*) in NVD data suggests all versions may be vulnerable, though the description explicitly names 1.0.0.7_cn_svn7958.

RemediationAI

Check Tenda's support portal at https://www.tenda.com.cn/ for firmware updates addressing CVE-2026-6632. At time of analysis, no patched firmware version is explicitly identified in available references. If no patch exists, implement network-level compensating controls: (1) Restrict web admin interface access to trusted management VLANs only - block WAN-side and guest network access to TCP 80/443 on router LAN IP (side effect: remote management disabled). (2) Change default admin credentials to complex passwords (20+ characters) to raise authentication bar (does not eliminate risk if attacker has LAN access). (3) Disable remote management features entirely via router settings if not operationally required (prevents WAN-based exploitation but authenticated LAN users remain threat). (4) For critical environments, replace Tenda F451 with enterprise-grade routers receiving active security support. VulDB reference https://vuldb.com/vuln/358266 may contain additional mitigation guidance.