CVE-2026-36785

HighCVSS 7.5

Published: 05/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

28th percentile - higher than 28% of all known CVEs

Summary

Stack overflow vulnerability in Tenda FH451 V1.0.0.9 in the fromDhcpListClient function allows an attacker to cause a DoS via a crafted HTTP request.

Risk Assessment

An attacker could cause the network device to become unavailable, disrupting local network operations.

Recommendation

Update the Tenda FH451 router firmware to the latest version or restrict access to the administrative interface.

Other vulnerabilities in Tenda FH451

CVE-2026-36786High
Tenda FH451 router version V1.0.0.9 has a stack overflow vulnerability in the list1 parameter of the fromDhcpListClient function. An attacker can cause a denial of service via a crafted HTTP request.

Original NVD description (English source)

Shenzhen Tenda Technology Co., Ltd Tenda FH451 V1.0.0.9 was discovered to contain a stack overflow in the page parameter of the fromDhcpListClient function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.