CVE-2026-6137 | Tenda F451 1.0.0.7_cn_svn7958 /goform/AdvSetWan fromAdvSetWan wanmode/PPPOEPassword stack-based overflow

A vulnerability classified as critical was found in Tenda F451 1.0.0.7_cn_svn7958. The affected element is the function fromAdvSetWan of the file /goform/AdvSetWan. The manipulation of the argument wanmode/PPPOEPassword results in stack-based buffer overflow.

This vulnerability is known as CVE-2026-6137. It is possible to launch the attack remotely. Furthermore, an exploit is available.