CVE-2026-11557: Tenda F451 Web Management Natlimit fromNatlimit stack-based overflow
A weakness has been identified in Tenda F451 1.0.0.7/1.0.0.9. The affected element is the function fromNatlimit of the file /goform/Natlimit of the component Web Management Interface. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable remote/remote-administration access to the web management interface (prevent WAN/internet access) so the vulnerable /goform/Natlimit endpoint cannot be reached remotely.
Tenda F451 Web Management Interface remote_administration = disabled - Compensating control
Restrict access to the router management interface to trusted IPs via firewall/ACL rules; block inbound internet access to the device's management ports and paths (including /goform/Natlimit).
- Compensating control
Deploy a WAF or HTTP filtering rule to block or drop requests targeting /goform/Natlimit and/or requests containing a manipulated 'page' parameter that could trigger the stack-based buffer overflow.
- Operational
Monitor vendor advisories for an official vendor patch or firmware update for the Tenda F451 and apply the vendor-supplied fix as soon as it is available.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-11557?
CVE-2026-11557 has a severity rating of high, specifically a 7.4 on the CVSS scale.
How do I fix CVE-2026-11557?
To fix CVE-2026-11557, update the Tenda F451 firmware to a version later than 1.0.0.9.
What types of attacks are possible with CVE-2026-11557?
CVE-2026-11557 allows for stack-based buffer overflow attacks, which can lead to unauthorized access or system crashes.
Which component is affected by CVE-2026-11557?
The affected component in CVE-2026-11557 is the Web Management Interface's fromNatlimit function.
What systems are at risk due to CVE-2026-11557?
Systems using Tenda F451 versions 1.0.0.7 and 1.0.0.9 are at risk due to CVE-2026-11557.