LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →

CVE-2026-6630 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: April 20, 2026

Tenda F451 - Buffer Overflow

Published: April 20, 2026Updated: April 20, 2026Remote Exploitable

Overview

Tenda F451 1.0.0.7_cn_svn7958 contains a buffer overflow caused by manipulation of the "dips" argument in /goform/GstDhcpSetSer httpd component, letting remote attackers cause memory corruption, exploit requires no special privileges.

Severity & Score

Severity: High
CVSS Score: 8.8
EPSS Score: 4.6%(Probability of exploitation in next 30 days)

Impact

Remote attackers can cause memory corruption leading to potential code execution or system crash.

Mitigation

Update to the latest version.

Social Media Activity(2 posts)

TheHackerWire
TheHackerWire
@thehackerwire
Apr 20, 2026

🟠 CVE-2026-6630 - High (8.8) A vulnerability was found in Tenda F451 1.0.0.7_cn_svn7958. This issue affects the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer of the component httpd. Performing a manipulation of the argument dips results in buffer overflow. The ... šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-6630/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post
TheHackerWire
TheHackerWire
@thehackerwire
Apr 20, 2026

🟠 CVE-2026-6630 - High (8.8) A vulnerability was found in Tenda F451 1.0.0.7_cn_svn7958. This issue affects the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer of the component httpd. Performing a manipulation of the argument dips results in buffer overflow. The ... šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-6630/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Details

CVE ID
CVE-2026-6630
Severity
High
CVSS Score
8.8
Type
buffer_overflow
Status
new
EPSS
4.6%
Social Posts
2

CWE

  • CWE-119

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

4.6%Probability of exploitation in the next 30 days