CVE-2026-3679

Name of the Vulnerable Software and Affected Versions Tenda FH451 version 1.0.0.9

Description A stack-based buffer overflow exists in the formQuickIndex function of the /goform/QuickIndex file. Manipulation of the mit linktype/PPPOEPassword argument can trigger this issue, allowing for remote exploitation. The exploit is publicly available.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the /goform/QuickIndex file to minimize the risk of exploitation. Avoid using the mit linktype/PPPOEPassword argument in the affected file until the issue is resolved.