CVE-2026-5988: Tenda F451 AdvSetWrlsafeset formWrlsafeset stack-based overflow
A vulnerability was detected in Tenda F451 1.0.0.7. This impacts the function formWrlsafeset of the file /goform/AdvSetWrlsafeset. Performing a manipulation of the argument mitssid results in stack-based buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5988?
CVE-2026-5988 is classified as a critical severity vulnerability due to the potential for remote code execution through stack-based buffer overflow.
How do I fix CVE-2026-5988?
To fix CVE-2026-5988, update the Tenda F451 firmware to the latest version that addresses this vulnerability.
What systems are affected by CVE-2026-5988?
CVE-2026-5988 affects Tenda F451 devices specifically running version 1.0.0.7.
What type of vulnerability is CVE-2026-5988?
CVE-2026-5988 is a stack-based buffer overflow vulnerability that can be exploited through the formWrlsafeset function.
Can CVE-2026-5988 be exploited remotely?
Yes, CVE-2026-5988 can be exploited remotely by manipulating the mit_ssid argument during a request.