CVE-2026-6123Disclosure(tenda / f451)

LOWCVSS 7.4 · HIGH

Signal is active with 4 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was found in Tenda F451 1.0.0.7. This affects the function fromAddressNat of the file /goform/addressNat of the component httpd. Performing a manipulation of the argument entrys results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-119CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • f451
  • f451_firmware

Threat summary

  • 4 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 2 classified signals
  • 4 total mentions across 1 day

Affected systems

Vendors
Products
f451f451_firmware

2 versions affected across 2 products

Deep dive

Activity timeline4 mentions / 1d
01234Mentions · 2026-04-12: 4Technical Details · 2026-04-12: 204-12
Signal classification2 categories
Disclosure
250.0%
General
250.0%
Referenced assets4 URLs
Full discourse4 posts
  • CVEarity@CVEarity
    General

    ⚡ New CVE Alert: CVE-2026-6123 📊 Severity: 8.8 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-6123 #CVE-2026-6123 #CVE #High #CyberSecurity #InfoSec https://t.co/qiprm1OvYP

    Post summary

    The tweet announces CVE-2026-6123 with a high severity score, but provides no additional technical, exploit, or remediation details.

    0000039
    125 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-6123 A vulnerability was found in Tenda F451 1.0.0.7. This affects the function fromAddressNat of the file /goform/addressNat of the component httpd. Performing a manipulati… https://www.cve.org/CVERecord?id=CVE-2026-6123 ----- Traducción: Se encontró una v… http://infoflow.cloud`

    Post summary

    A new vulnerability CVE-2026-6123 affecting Tenda F451 router’s httpd component via the fromAddressNat function is reported, but no PoC, exploit, or patch info is provided.

    0000032
    71 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-6123 A vulnerability was found in Tenda F451 1.0.0.7. This affects the function fromAddressNat of the file /goform/addressNat of the component httpd. Performing a manipulati… https://www.cve.org/CVERecord?id=CVE-2026-6123

    Post summary

    A new CVE (CVE‑2026‑6123) affecting Tenda F451 was disclosed, but the post offers limited technical detail and no evidence of exploitation or available patch.

    00000354
    57.1K followersView on X
  • CVEFind.com@CveFindCom
    Disclosure

    [CVE-2026-6123: HIGH] Critical vulnerability identified in Tenda F451 1.0.0.7 allows remote attackers to execute stack-based buffer overflow through manipulation of argument entrys in /goform/addressNat of htt...#cve,CVE-2026-6123,#cybersecurity https://cvefind.com/CVE-2026-6123

    Post summary

    The post announces the discovery of a stack-based buffer overflow vulnerability (CVE-2026-6123) in Tenda F451, describing how it can be exploited but providing no PoC, active exploitation evidence, patches, or false‑positive claims.

    0000046
    620 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
HWtendaf451---
OStendaf451_firmware1.0.0.7--

Explore more