Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A security flaw has been discovered in Tenda F451 1.0.0.7_cn_svn7958. This vulnerability affects the function fromqossetting of the file /goform/qossetting. Performing a manipulation of the argument qos results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-04-12 | 2 | Disclosure2 |
| 2026-04-13 | 2 | Disclosure1Exploit1 |
CVE-2026-6134 A security flaw has been discovered in Tenda F451 1.0.0.7_cn_svn7958. This vulnerability affects the function fromqossetting of the file /goform/qossetting. Performing … https://www.cve.org/CVERecord?id=CVE-2026-6134
Post summary
A new vulnerability, CVE-2026-6134, affecting the Tenda F451 router’s qossetting function has been identified and reported.
🚨 HIGH SEVERITY: CVE-2026-6134 (CVSS 8.8) Tenda F451 router stack-based buffer overflow in qossetting function. Remotely exploitable with low privileges. Public exploit available. Affected: Tenda F451 v1.0.0.7_cn_svn7958 #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/LxcVCjImct
Post summary
The post highlights a high‑severity stack-based buffer overflow in Tenda F451 (CVE‑2026‑6134) and notes a public exploit, though no patch or detailed exploit code is included.
CVE-2026-6134 Stack-Based Buffer Overflow in Tenda F451 1.0.0.7_cn_svn7958 qossetting Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6134
Post summary
The text announces CVE-2026-6134, detailing a stack-based buffer overflow in Tenda F451's qossetting function and links to a vulnerability database for further information.
[CVE-2026-6134: HIGH] Critical security flaw in Tenda F451 1.0.0.7_cn_svn7958 exposes remote attack risk. Vulnerability in fromqossetting of /goform/qossetting allows stack-based buffer overflow. Immediate act...#cve,CVE-2026-6134,#cybersecurity https://cvefind.com/CVE-2026-6134
Post summary
The post announces CVE-2026-6134, a high‑severity stack‑based buffer overflow in Tenda F451 firmware, without referencing patches, PoC, or active exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | f451 | - | - | - |
| OS | tenda | f451_firmware | 1.0.0.7 | - | - |