Tenda f451 Firmware vulnerabilities

16 CVEs affecting Tenda f451 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-6137, published 2026-04-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-3679, published 2026-03-07. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was identified in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function formQuickIndex of the file /goform/QuickIndex. Such manipulation of the argument…
CVE-2026-6123, published 2026-04-12. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was found in Tenda F451 1.0.0.7. This affects the function fromAddressNat of the file /goform/addressNat of the component httpd. Performing a manipulation of the argument entrys…
CVE-2026-6137, published 2026-04-13. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was detected in Tenda F451 1.0.0.7_cn_svn7958. The affected element is the function fromAdvSetWan of the file /goform/AdvSetWan. The manipulation of the argument wanmode/PPPOEPassword…
CVE-2026-6136, published 2026-04-13. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A security vulnerability has been detected in Tenda F451 1.0.0.7_cn_svn7958. Impacted is the function frmL7ImForm of the file /goform/L7Im. The manipulation of the argument page leads to stack-based…
CVE-2026-6135, published 2026-04-13. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A weakness has been identified in Tenda F451 1.0.0.7_cn_svn7958. This issue affects the function fromSetIpBind of the file /goform/SetIpBind. Executing a manipulation of the argument page can lead to…
CVE-2026-6134, published 2026-04-12. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A security flaw has been discovered in Tenda F451 1.0.0.7_cn_svn7958. This vulnerability affects the function fromqossetting of the file /goform/qossetting. Performing a manipulation of the argument…
CVE-2026-6133, published 2026-04-12. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958. This affects the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Such manipulation of the argument page leads to…
CVE-2026-6124, published 2026-04-12. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was determined in Tenda F451 1.0.0.7. This vulnerability affects the function fromSafeMacFilter of the file /goform/SafeMacFilter of the component httpd. Executing a manipulation of…
CVE-2026-6122, published 2026-04-12. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda F451 1.0.0.7. Affected by this issue is the function frmL7ProtForm of the file /goform/L7Prot of the component httpd. Such manipulation of the argument page…
CVE-2026-6121, published 2026-04-12. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A flaw has been found in Tenda F451 1.0.0.7. Affected by this vulnerability is the function WrlclientSet of the file /goform/WrlclientSet of the component httpd. This manipulation of the argument GO…

Latest

CVE-2026-6120, published 2026-04-12. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was detected in Tenda F451 1.0.0.7. Affected is the function fromDhcpListClient of the file /goform/DhcpListClient of the component httpd. The manipulation of the argument page…