Tenda f451 vulnerabilities

5 CVEs affecting Tenda f451, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-11557, published 2026-06-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-11556, published 2026-06-08. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. A security flaw has been discovered in Tenda F451 1.0.0.7/1.0.0.9. Impacted is the function formWriteFacMac of the file /goform/WriteFacMac of the component Web Management Interface. Performing a…
CVE-2026-6632, published 2026-04-20. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958. The affected element is the function fromSafeClientFilter of the file /goform/SafeClientFilter of the component httpd. The…
CVE-2026-6631, published 2026-04-20. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was determined in Tenda F451 1.0.0.7_cn_svn7958. Impacted is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter of the component httpd. Executing a…
CVE-2026-6630, published 2026-04-20. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was found in Tenda F451 1.0.0.7_cn_svn7958. This issue affects the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer of the component httpd. Performing a manipulation of…
CVE-2026-11557, published 2026-06-08. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A weakness has been identified in Tenda F451 1.0.0.7/1.0.0.9. The affected element is the function fromNatlimit of the file /goform/Natlimit of the component Web Management Interface. Executing a…