PT-2026-33754 · Tenda · F451

Jimi666 · Published 2026-04-20 · Updated 2026-04-20 · CVE-2026-6631

Mitre

CVSS v3.1

8.8

High

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A vulnerability was determined in Tenda F451 1.0.0.7 cn svn7958. Impacted is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter of the component httpd. Executing a manipulation of the argument page can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

CVE-2026-6631

Affected Products

F451

References · 6

• 🔥 https://github.com/Jimi-Lab/cve/issues/25 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-6631 · Security Note
• https://tenda.com.cn · Note
• https://vuldb.com/submit/792904 · Note
• https://vuldb.com/vuln/358265/cti · Note
• https://vuldb.com/vuln/358265 · Note