← back
CVE-2026-6136

Tenda F451 L7Im frmL7ImForm stack-based overflow

CVSS 8.7 HIGHEPSS 0.5%CWE-119CWE-121
A security vulnerability has been detected in Tenda F451 1.0.0.7_cn_svn7958. Impacted is the function frmL7ImForm of the file /goform/L7Im. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
Tenda · F451
public PoCs found — 1
cve_referencegithub.com/Jimi-Lab/cve/issues/21unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/Jimi-Lab/cve/issues/21https://vuldb.com/submit/792880https://vuldb.com/vuln/357000https://vuldb.com/vuln/357000/ctihttps://www.tenda.com.cn/