CVE-2026-36786

HighCVSS 7.5

Published: 08/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

34th percentile - higher than 34% of all known CVEs

Summary

Tenda FH451 router version V1.0.0.9 has a stack overflow vulnerability in the list1 parameter of the fromDhcpListClient function. An attacker can cause a denial of service via a crafted HTTP request.

Risk Assessment

A remote attacker can crash the router, disrupting network service for all users.

Recommendation

Contact the vendor for a firmware update or apply a workaround if available.

Other vulnerabilities in Tenda FH451

CVE-2026-36785High
Stack overflow vulnerability in Tenda FH451 V1.0.0.9 in the fromDhcpListClient function allows an attacker to cause a DoS via a crafted HTTP request.

Original NVD description (English source)

Shenzhen Tenda Technology Co., Ltd Tenda FH451 V1.0.0.9 was discovered to contain a stack overflow in the list1 parameter of the fromDhcpListClient function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.