CVE-2026-3679 | Tenda FH451 1.0.0.9 /goform/QuickIndex formQuickIndex mit_linktype/PPPOEPassword stack-based overflow

A vulnerability classified as critical was found in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function formQuickIndex of the file /goform/QuickIndex. Such manipulation of the argument mit_linktype/PPPOEPassword leads to stack-based buffer overflow.

This vulnerability is referenced as CVE-2026-3679. It is possible to launch the attack remotely. Furthermore, an exploit is available.