← back
CVE-2026-6123

Tenda F451 httpd addressNat fromAddressNat stack-based overflow

CVSS 8.7 HIGHEPSS 0.5%CWE-119CWE-121
A vulnerability was found in Tenda F451 1.0.0.7. This affects the function fromAddressNat of the file /goform/addressNat of the component httpd. Performing a manipulation of the argument entrys results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
Tenda · F451
public PoCs found — 1
cve_referencegithub.com/Jimi-Lab/cve/issues/15unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/Jimi-Lab/cve/issues/15https://vuldb.com/submit/792873https://vuldb.com/submit/792879https://vuldb.com/vuln/356986https://vuldb.com/vuln/356986/ctihttps://www.tenda.com.cn/