Tenda Router Vulnerability: Remote Exploitable Buffer Overflow

The National Vulnerability Database has identified CVE-2026-6630, a critical buffer overflow vulnerability in Tenda F451 routers running firmware version 1.0.0.7_cn_svn7958. This flaw resides within the httpd component, specifically in the /goform/GstDhcpSetSer file and the fromGstDhcpSetSer function. Attackers can exploit this by manipulating the ‘dips’ argument, triggering a buffer overflow that can be initiated remotely without requiring any user interaction or prior authentication.

With a CVSS score of 8.8 (HIGH), this vulnerability presents a significant risk. The National Vulnerability Database highlights that the exploit has been publicly disclosed, meaning threat actors can readily develop and deploy attacks against unpatched Tenda F451 devices. The potential impact includes remote code execution, allowing attackers to compromise the router and potentially use it as a pivot point into the network or to intercept traffic passing through it.

Defenders should immediately identify and secure all Tenda F451 routers within their infrastructure. Prioritize patching firmware to the latest available version or, if patching is not immediately feasible, implement network segmentation to isolate these devices and restrict remote access. Given the public exploit, assuming these devices are already targeted or compromised is a prudent security posture.