CVE-2026-6134: Stack Overflow in Tenda F451 Router

The stack-based buffer overflow vulnerability in the Tenda F451 allows attackers to send specially crafted requests to the /goform/qossetting endpoint, manipulating the qos argument. This manipulation can overwrite critical memory regions on the router, leading to a crash or, more seriously, allowing the attacker to inject and execute malicious code. Given the router's role as a network gateway, a successful exploit could provide an attacker with access to the internal network, enabling them to intercept traffic, steal sensitive data, or launch further attacks against connected devices. The availability of a public exploit significantly elevates the risk, as it lowers the barrier to entry for malicious actors.

1. Reserved2026-04-12
2. Published2026-04-12
3. Modified2026-04-15
4. EPSS updated2026-04-20

The primary mitigation for CVE-2026-6134 is to upgrade the Tenda F451 router to a firmware version that addresses the buffer overflow vulnerability. Unfortunately, a fixed firmware version is not yet specified. Until a patch is available, consider implementing temporary workarounds such as restricting access to the /goform/qossetting endpoint using a firewall or access control list (ACL). Monitoring network traffic for unusual patterns or connections to suspicious IP addresses can also help detect potential exploitation attempts. After applying any mitigation, verify its effectiveness by attempting to reproduce the vulnerability with a safe test payload.