Exploit discussion active in current signal (5 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A vulnerability was detected in Tenda F451 1.0.0.7. Affected is the function fromDhcpListClient of the file /goform/DhcpListClient of the component httpd. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
⚡ New CVE Alert: CVE-2026-6120 📊 Severity: 8.8 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-6120 #CVE-2026-6120 #CVE #High #CyberSecurity #InfoSec https://t.co/HYyL9OpDsS
Post summary
The tweet simply announces the existence of CVE-2026-6120 and its severity rating, without providing additional exploitation or mitigation details.
🚨*CVE* CVE-2026-6120 A vulnerability was detected in Tenda F451 1.0.0.7. Affected is the function fromDhcpListClient of the file /goform/DhcpListClient of the component httpd. The manipulat… https://www.cve.org/CVERecord?id=CVE-2026-6120 ----- Traducción: CVE-2026-6120 Se … http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑6120 in a Tenda device, providing a short technical description of the affected function and file, but no evidence of exploits, patches, or active attacks.
CVE-2026-6120 A vulnerability was detected in Tenda F451 1.0.0.7. Affected is the function fromDhcpListClient of the file /goform/DhcpListClient of the component httpd. The manipulat… https://www.cve.org/CVERecord?id=CVE-2026-6120
Post summary
A new vulnerability (CVE-2026-6120) was reported in Tenda F451, affecting the fromDhcpListClient function of httpd, with no evidence of active exploitation or available patch.
[CVE-2026-6120: HIGH] Critical vulnerability found in Tenda F451 1.0.0.7: stack-based buffer overflow in httpd component allows remote attacks via manipulated argument. Exploit now public.#cve,CVE-2026-6120,#cybersecurity https://cvefind.com/CVE-2026-6120
Post summary
The post discloses CVE‑2026‑6120, highlighting a stack‑based buffer overflow in a Tenda router’s httpd component and noting that an exploit has become public, though no exploit code or patch details are shared.
CVE-2026-6120 Stack-Based Buffer Overflow in Tenda F451 1.0.0.7 DhcpListClient Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6120
Post summary
The post announces a stack-based buffer overflow vulnerability (CVE-2026-6120) in the Tenda F451 router and links to a vulnerability details page.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | f451 | - | - | - |
| OS | tenda | f451_firmware | 1.0.0.7 | - | - |