← back
CVE-2026-5989

Tenda F451 RouteStatic fromRouteStatic stack-based overflow

CVSS 8.7 HIGHEPSS 0.5%CWE-119CWE-121
A flaw has been found in Tenda F451 1.0.0.7. Affected is the function fromRouteStatic of the file /goform/RouteStatic. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
Tenda · F451
public PoCs found — 1
cve_referencegithub.com/Jimi-Lab/cve/issues/5unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/Jimi-Lab/cve/issues/5https://vuldb.com/submit/792858https://vuldb.com/vuln/356543https://vuldb.com/vuln/356543/ctihttps://www.tenda.com.cn/