A vulnerability marked as critical has been reported in Tenda F451 1.0.0.7. Affected by this vulnerability is the function WrlclientSet of the file /goform/WrlclientSet of the component httpd. This manipulation of the argument GO causes stack-based buffer overflow.

This vulnerability appears as CVE-2026-6121. The attack may be initiated remotely. In addition, an exploit is available.