CVE-2026-6122: Tenda F451 httpd L7Prot frmL7ProtForm stack-based overflow
A vulnerability has been found in Tenda F451 1.0.0.7. Affected by this issue is the function frmL7ProtForm of the file /goform/L7Prot of the component httpd. Such manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6122?
The severity of CVE-2026-6122 is rated high with a score of 7.4.
What type of vulnerability is CVE-2026-6122?
CVE-2026-6122 is a stack-based buffer overflow vulnerability in the Tenda F451 firmware.
How can CVE-2026-6122 impact my system?
CVE-2026-6122 can allow remote attackers to exploit the vulnerability to execute arbitrary code on the affected device.
How do I fix CVE-2026-6122?
To fix CVE-2026-6122, update the Tenda F451 firmware to the latest version that addresses this vulnerability.
Is CVE-2026-6122 remotely exploitable?
Yes, CVE-2026-6122 can be exploited remotely due to vulnerabilities in the httpd component.