Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-6120

Tenda F451 httpd DhcpListClient fromDhcpListClient stack-based overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was detected in Tenda F451 1.0.0.7. Affected is the function fromDhcpListClient of the file /goform/DhcpListClient of the component httpd. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenda F451

  • 1.0.0.7affected

References