Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A flaw has been found in Tenda FH451 1.0.0.9. This affects the function formWrlExtraSet of the file /goform/WrlExtraSet. This manipulation of the argument GO causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-03-22 | 5 | Disclosure4General1 |
| 2026-03-23 | 2 | Exploit1General1 |
CVE-2026-4534 affects Tenda FH451 version 1.0.0.9. Stack-based buffer overflow in formWrlExtraSet function via /goform/WrlExtraSet endpoint. Triggered by manipulating the GO argument. Exploit code is already public.
Post summary
CVE-2026-4534 is a stack‑based buffer overflow in Tenda FH451; exploit code is publicly available, but no patches or evidence of active exploitation are reported.
🚨 Today CVE: CVE-2026-4534 This one caught my attention. Another Tenda router. Another stack overflow. Another day ending in Y.
Post summary
The tweet points out that CVE-2026-4534 is a stack‑overflow issue on a Tenda router but offers no further details, tools, patches, or evidence of exploitation.
🔍 Today's Top Vulnerabilities 🔴 CVE-2019-25568 | CVSS 9.8 🟠 CVE-2026-4535 | CVSS 8.8 🟠 CVE-2026-4534 | CVSS 8.8 🔗 http://ctiwatch.cloud/vulnerabilities #CVE #Vulnerability #ThreatIntel
Post summary
A brief list of three CVEs and their CVSS scores is presented, without additional technical details, proof-of-concept references, or patch information.
⚡ New CVE Alert: CVE-2026-4534 📊 Severity: 8.8 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-4534 #CVE-2026-4534 #CVE #High #CyberSecurity #InfoSec https://t.co/J4MDROJLsi
Post summary
The tweet announces the new CVE-2026-4534, notes its high severity, and links to the NVD page, but offers no further technical or exploit information.
CVE-2026-4534 A flaw has been found in Tenda FH451 1.0.0.9. This affects the function formWrlExtraSet of the file /goform/WrlExtraSet. This manipulation of the argument GO causes sta… https://www.cve.org/CVERecord?id=CVE-2026-4534
Post summary
A new vulnerability (CVE‑2026‑4534) affecting Tenda FH451 routers is disclosed; technical details on the vulnerable function are provided but no PoC, exploit, or patch information is present.
CVE Alert: CVE-2026-4534 - Tenda - FH451 - https://www.redpacketsecurity.com/cve-alert-cve-2026-4534-tenda-fh451/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-4534 #tenda #fh451
Post summary
The post announces CVE‑2026‑4534 affecting the Tenda FH451 device and provides a link to a security alert, but does not include any PoC, exploit code, patch, or evidence of active exploitation.
[CVE-2026-4534: HIGH] Critical vulnerability in Tenda FH451 1.0.0.9 allows remote attackers to trigger a stack-based buffer overflow via a manipulated argument, exposing users to serious cyber threats.#cve,CVE-2026-4534,#cybersecurity https://cvefind.com/CVE-2026-4534
Post summary
The post announces CVE‑2026‑4534 as a critical stack‑based buffer overflow in Tenda FH451 firmware, providing technical details but no PoC, exploitation evidence, patch, or debunking information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | fh451 | - | - | - |
| OS | tenda | fh451_firmware | 1.0.0.9 | - | - |