CVE-2026-6120 | Tenda F451 1.0.0.7 httpd /goform/DhcpListClient fromDhcpListClient page stack-based overflow

A vulnerability labeled as critical has been found in Tenda F451 1.0.0.7. Affected is the function fromDhcpListClient of the file /goform/DhcpListClient of the component httpd. The manipulation of the argument page results in stack-based buffer overflow.

This vulnerability is reported as CVE-2026-6120. The attack can be launched remotely. Moreover, an exploit is present.