Tenda Router Vulnerability Exposes Networks to Remote Exploitation

The National Vulnerability Database has identified CVE-2026-6631, a critical buffer overflow vulnerability affecting Tenda F451 routers running firmware version 1.0.0.7_cn_svn7958. This flaw resides in the webExcptypemanFilter function within the router’s HTTP daemon. Attackers can exploit this by manipulating the page argument, potentially leading to remote code execution with high impact on confidentiality, integrity, and availability.

This vulnerability, carrying a CVSS score of 8.8, is particularly concerning as it allows for remote, unauthenticated attacks. The public disclosure of the exploit means that threat actors can readily weaponize it against unpatched devices. Organizations relying on Tenda routers, especially in less managed environments or older deployments, are at significant risk.

Defenders must prioritize patching or replacing vulnerable Tenda F451 devices immediately. Network segmentation and strict firewall rules can help limit the blast radius if an exploit occurs. Proactive vulnerability scanning and asset inventory are crucial to identify and remediate such risks before they are leveraged.