Tenda F451 Firmware
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Tenda F451 Firmware.
By the Year
In 2026 there have been 18 vulnerabilities in Tenda F451 Firmware with an average score of 8.8 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 18 | 8.80 |
It may take a day or so for new F451 Firmware vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Tenda F451 Firmware Security Vulnerabilities
Tenda F451 1.0.0.7 httpd fromSafeClientFilter Buffer Overflow
CVE-2026-6632
8.8 - High
- April 20, 2026
A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958. The affected element is the function fromSafeClientFilter of the file /goform/SafeClientFilter of the component httpd. The manipulation of the argument menufacturer/Go leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
Classic Buffer Overflow
Tenda F451 1.0.0.7 buffer overflow via httpd webExcptypemanFilter
CVE-2026-6631
8.8 - High
- April 20, 2026
A vulnerability was determined in Tenda F451 1.0.0.7_cn_svn7958. Impacted is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter of the component httpd. Executing a manipulation of the argument page can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Classic Buffer Overflow
Tenda F451 1.0.0.7_cn_svn7958 httpd Buffer Overflow via fromGstDhcpSetSer
CVE-2026-6630
8.8 - High
- April 20, 2026
A vulnerability was found in Tenda F451 1.0.0.7_cn_svn7958. This issue affects the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer of the component httpd. Performing a manipulation of the argument dips results in buffer overflow. The attack may be initiated remotely. The exploit has been made public and could be used.
Classic Buffer Overflow
Tenda F451 1.0.0.7_cn_svn7958 Stack BOV via /goform/AdvSetWan PPPOEPassword
CVE-2026-6137
8.8 - High
- April 12, 2026
A vulnerability was detected in Tenda F451 1.0.0.7_cn_svn7958. The affected element is the function fromAdvSetWan of the file /goform/AdvSetWan. The manipulation of the argument wanmode/PPPOEPassword results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.
Stack Overflow
Tenda F451 1.0.0.7_cn_svn7958 Stack Buffer Overflow in frmL7ImForm
CVE-2026-6136
8.8 - High
- April 12, 2026
A security vulnerability has been detected in Tenda F451 1.0.0.7_cn_svn7958. Impacted is the function frmL7ImForm of the file /goform/L7Im. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Stack Overflow
Tenda F451 1.0.0.7 Stack-Based Buffer Overflow in SetIpBind function
CVE-2026-6135
8.8 - High
- April 12, 2026
A weakness has been identified in Tenda F451 1.0.0.7_cn_svn7958. This issue affects the function fromSetIpBind of the file /goform/SetIpBind. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
Stack Overflow
Stack Buffer Overflow in Tenda F451 v1.0.0.7_cn_svn7958 /goform/qossetting
CVE-2026-6134
8.8 - High
- April 12, 2026
A security flaw has been discovered in Tenda F451 1.0.0.7_cn_svn7958. This vulnerability affects the function fromqossetting of the file /goform/qossetting. Performing a manipulation of the argument qos results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
Stack Overflow
Tenda F451 1.0.0.7 Stack-based Buffer Overflow in fromSafeUrlFilter
CVE-2026-6133
8.8 - High
- April 12, 2026
A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958. This affects the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Such manipulation of the argument page leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.
Stack Overflow
Stack Buffer Overflow in Tenda F451 1.0.0.7 HTTPD SafeMacFilter
CVE-2026-6124
8.8 - High
- April 12, 2026
A vulnerability was determined in Tenda F451 1.0.0.7. This vulnerability affects the function fromSafeMacFilter of the file /goform/SafeMacFilter of the component httpd. Executing a manipulation of the argument page/menufacturer can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.
Stack Overflow
Tenda F451 1.0.0.7 HTTPD Stack-based Buffer Overflow via fromAddressNat
CVE-2026-6123
8.8 - High
- April 12, 2026
A vulnerability was found in Tenda F451 1.0.0.7. This affects the function fromAddressNat of the file /goform/addressNat of the component httpd. Performing a manipulation of the argument entrys results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
Stack Overflow
Tenda F451 1.0.0.7: httpd frmL7ProtForm buffer overflow
CVE-2026-6122
8.8 - High
- April 12, 2026
A vulnerability has been found in Tenda F451 1.0.0.7. Affected by this issue is the function frmL7ProtForm of the file /goform/L7Prot of the component httpd. Such manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Stack Overflow
Tenda F451 1.0.0.7 HTTPD - Stack-based Buffer Overflow in WrlclientSet
CVE-2026-6121
8.8 - High
- April 12, 2026
A flaw has been found in Tenda F451 1.0.0.7. Affected by this vulnerability is the function WrlclientSet of the file /goform/WrlclientSet of the component httpd. This manipulation of the argument GO causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been published and may be used.
Stack Overflow
Stack overflow in httpd of Tenda F451 1.0.0.7 via /goform/DhcpListClient
CVE-2026-6120
8.8 - High
- April 12, 2026
A vulnerability was detected in Tenda F451 1.0.0.7. Affected is the function fromDhcpListClient of the file /goform/DhcpListClient of the component httpd. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used.
Stack Overflow
Tenda F451 1.0.0.7 RCE via P2pListFilter Buffer Overflow
CVE-2026-5992
8.8 - High
- April 10, 2026
A vulnerability was determined in Tenda F451 1.0.0.7. This affects the function fromP2pListFilter of the file /goform/P2pListFilter. This manipulation of the argument page causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Stack Overflow
Tenda F451 1.0.0.7 - formWrlExtraSet GO buf overflow (remote)
CVE-2026-5991
8.8 - High
- April 09, 2026
A vulnerability was found in Tenda F451 1.0.0.7. Affected by this issue is the function formWrlExtraSet of the file /goform/WrlExtraSet. The manipulation of the argument GO results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used.
Stack Overflow
Stack Overflow via SafeEmailFilter in Tenda F451 1.0.0.7
CVE-2026-5990
8.8 - High
- April 09, 2026
A vulnerability has been found in Tenda F451 1.0.0.7. Affected by this vulnerability is the function fromSafeEmailFilter of the file /goform/SafeEmailFilter. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Stack Overflow
Tenda F451 1.0.0.7 RouteStatic stackoverflow via page param
CVE-2026-5989
8.8 - High
- April 09, 2026
A flaw has been found in Tenda F451 1.0.0.7. Affected is the function fromRouteStatic of the file /goform/RouteStatic. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.
Stack Overflow
Stack Buffer Overflow in Tenda F451 1.0.0.7 formWrlsafeset
CVE-2026-5988
8.8 - High
- April 09, 2026
A vulnerability was detected in Tenda F451 1.0.0.7. This impacts the function formWrlsafeset of the file /goform/AdvSetWrlsafeset. Performing a manipulation of the argument mit_ssid results in stack-based buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.
Stack Overflow
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Tenda F451 Firmware or by Tenda? Click the Watch button to subscribe.
