CVE-2026-6632

CVE-2026-6632 is a buffer overflow vulnerability affecting Tenda F451 router firmware version 1.0.0.7_cn_svn7958. The flaw exists in the httpd component's SafeClientFilter function within the /goform/SafeClientFilter endpoint and can be triggered through manipulation of the manufacturer/Go parameter. This vulnerability enables remote code execution on affected devices. The vulnerability carries a HIGH severity rating with a CVSS score of 8.8, requiring only low attack complexity and no user interaction from an authenticated attacker. Network-based remote exploitation is possible, and successful compromise would grant attackers complete system access including confidentiality, integrity, and availability breaches. The FAUCET risk score of 51.0/100 indicates moderate to high priority from a risk management perspective. Exploit code for this vulnerability is publicly available and currently active in the wild. While not yet listed on CISA's Known Exploited Vulnerabilities catalog, the combination of public exploit availability, active exploitation status, and the attack's requirement for only low privileges presents a significant threat. Organizations operating affected Tenda F451 routers should prioritize patching or firmware updates immediately.