ZeroDay Findings
Sign inSign up

Findings

CVE-2026-3677

A vulnerability was found in Tenda FH451 1.0.0.9.

Published Mar 7, 2026 · updated Jun 17, 2026 · tenda fh451 firmware

A vulnerability was found in Tenda FH451 1.0.0.9. This impacts the function fromSetCfm of the file /goform/setcfm. The manipulation of the argument funcname/funcpara1 results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 7, 2026 · NIST NVD

    Detected

    A vulnerability was found in Tenda FH451 1.0.0.9. This impacts the function fromSetCfm of the file /goform/setcfm. The manipulation of the argument funcname/funcpara1 results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used.

  2. Jun 17, 2026 · NIST NVD

    Updated

    A vulnerability was found in Tenda FH451 1.0.0.9. This impacts the function fromSetCfm of the file /goform/setcfm. The manipulation of the argument funcname/funcpara1 results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used.

Affected

  • cpe tenda/fh451 firmware1.0.0.9

Sources

  • CVE.orgVulnerability recordCVE-2026-3677

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-3677

    A vulnerability was found in Tenda FH451 1.0.0.9. This impacts the function fromSetCfm of the file /goform/setcfm. The manipulation of the argument funcname/funcpara1 results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public

    nvd.nist.gov

References