Cyber Posture

CVE-2026-4534

HighPublic PoC

Published: 22 March 2026

Published
22 March 2026
Modified
03 April 2026
KEV Added
Patch
CVSS Score 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0009 25.6th percentile
Risk Priority 18 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2026-4534 is a high-severity Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) vulnerability in Tenda Fh451 Firmware. Its CVSS base score is 8.8 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 25.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).

Threat & Defense at a Glance

What attackers do: exploitation maps to Exploit Public-Facing Application (T1190) and 1 other technique. What defenders deploy: see the NIST 800-53 controls recommended below.
Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

prevent

SI-2 mandates timely flaw remediation, directly addressing this known stack-based buffer overflow via firmware patching or updates.

prevent

SI-10 requires validation of information inputs like the GO argument to prevent stack buffer overflows from improper data handling.

prevent

SI-16 enforces memory protections such as stack guards and address space randomization to mitigate stack-based buffer overflow exploitation.

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
Why these techniques?

Stack-based buffer overflow in router web form (/goform/WrlExtraSet) enables remote authenticated RCE (AV:N/PR:L) on a public-facing management interface, directly supporting T1190 for initial compromise and T1068 for escalation from low-privileged access to full code execution.

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

NVD Description

A flaw has been found in Tenda FH451 1.0.0.9. This affects the function formWrlExtraSet of the file /goform/WrlExtraSet. This manipulation of the argument GO causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and…

more

may be used.

Deeper analysisAI

CVE-2026-4534 is a stack-based buffer overflow vulnerability affecting Tenda FH451 router firmware version 1.0.0.9. The issue resides in the formWrlExtraSet function of the /goform/WrlExtraSet file, where manipulation of the GO argument triggers the overflow. Published on 2026-03-22, it is associated with CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and CWE-121 (Stack-based Buffer Overflow).

The vulnerability carries a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating network accessibility, low attack complexity, and exploitation possible by low-privileged remote users without user interaction. Attackers can initiate the exploit remotely, potentially achieving high impacts on confidentiality, integrity, and availability, such as arbitrary code execution.

Advisories and references, including a GitHub repository at https://github.com/Litengzheng/vul_db/blob/main/FH451/vul_41/README.md containing a published exploit, VulDB entries at https://vuldb.com/?ctiid.352322, https://vuldb.com/?id.352322, and https://vuldb.com/?submit.774342, and the vendor site at https://www.tenda.com.cn/, provide further details. The exploit has been published and may be used, warranting immediate review of these sources for mitigation steps.

Details

CWE(s)

Affected Products

tenda
fh451 firmware
1.0.0.9

CVEs Like This One

CVE-2026-4535Same product: Tenda Fh451
CVE-2026-3678Same product: Tenda Fh451
CVE-2026-3677Same product: Tenda Fh451
CVE-2025-7792Same product: Tenda Fh451
CVE-2025-7805Same product: Tenda Fh451
CVE-2025-7506Same product: Tenda Fh451
CVE-2025-7434Same product: Tenda Fh451
CVE-2025-7505Same product: Tenda Fh451
CVE-2025-7806Same product: Tenda Fh451
CVE-2025-7794Same product: Tenda Fh451

References