CVE-2026-6133: Buffer Overflow in Tenda F451 SafeUrlFilter

The vulnerability allows a remote attacker to execute arbitrary code on the affected Tenda F451 router. By crafting a malicious request targeting the /goform/SafeUrlFilter endpoint, an attacker can overwrite memory on the stack, potentially gaining control of the device. Successful exploitation could lead to complete system compromise, including data theft, configuration modification, and the use of the router as a pivot point for further attacks within the network. The availability of a public exploit significantly elevates the risk, making it a high-priority concern.

1. Reserved2026-04-12
2. Published2026-04-12
3. Modified2026-04-13
4. EPSS updated2026-04-20

The primary mitigation is to upgrade the Tenda F451 firmware to a patched version. Unfortunately, a fixed version is not yet specified in the CVE details. As a temporary workaround, consider implementing strict input validation on the 'page' parameter within the /goform/SafeUrlFilter endpoint, if possible. Network segmentation can limit the potential blast radius of a successful exploit. Monitor router logs for unusual activity or attempts to access the /goform/SafeUrlFilter endpoint. A WAF configured to detect buffer overflow attempts targeting this endpoint could also provide some protection.