CVE-2026-6122

EUVD-2026-21722
A vulnerability has been found in Tenda F451 1.0.0.7. Affected by this issue is the function frmL7ProtForm of the file /goform/L7Prot of the component httpd. Such manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 25%
Affected Products (NVD)
VendorProductVersion
tendaf451_firmware
1.0.0.7
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/Jimi-Lab/cve/issues/14
https://vuldb.com/submit/792872
https://vuldb.com/vuln/356985
https://vuldb.com/vuln/356985/cti
https://www.tenda.com.cn/