Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.4
Tenda F451 Router: Remote Code Execution via Stack Overflow
CVE-2026-5991
Summary
The Tenda F451 router's configuration page has a bug that can be exploited by a hacker to execute malicious code remotely. This means a hacker could potentially take control of the router. To protect your network, update the router's firmware to the latest version.
Original title
A vulnerability was found in Tenda F451 1.0.0.7. Affected by this issue is the function formWrlExtraSet of the file /goform/WrlExtraSet. The manipulation of the argument GO results in stack-based b...
Original description
A vulnerability was found in Tenda F451 1.0.0.7. Affected by this issue is the function formWrlExtraSet of the file /goform/WrlExtraSet. The manipulation of the argument GO results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used.
nvd CVSS2.0
9.0
nvd CVSS3.1
8.8
nvd CVSS4.0
7.4
Vulnerability type
CWE-119
Buffer Overflow
CWE-121
Stack-based Buffer Overflow
Published: 10 Apr 2026 · Updated: 10 Apr 2026 · First seen: 10 Apr 2026