PatchSiren cyber security CVE debrief
CVE-2026-36785 Shenzhen Tenda Technology Co., Ltd CVE debrief
A stack overflow vulnerability was discovered in Shenzhen Tenda Technology Co., Ltd Tenda FH451 V1.0.0.9. The vulnerability is located in the page parameter of the fromDhcpListClient function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request. The vulnerability has a CVSS score of 7.5 and a severity of HIGH.
- Vendor
- Shenzhen Tenda Technology Co., Ltd
- Product
- Tenda FH451
- CVSS
- HIGH 7.5
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-05
- Original CVE updated
- 2026-06-08
- Advisory published
- 2026-06-05
- Advisory updated
- 2026-06-08
Who should care
Users of Shenzhen Tenda Technology Co., Ltd Tenda FH451 V1.0.0.9 should be aware of this vulnerability and take necessary actions to mitigate it.
Technical summary
The vulnerability is a stack overflow in the page parameter of the fromDhcpListClient function. This can be exploited by sending a crafted HTTP request to the affected device, potentially leading to a Denial of Service (DoS).
Defensive priority
HIGH
Recommended defensive actions
- Apply patches or updates provided by the vendor to fix the vulnerability.
- Restrict access to the affected device to only trusted networks and users.
- Monitor network traffic for suspicious activity.
Evidence notes
The vulnerability was discovered in Shenzhen Tenda Technology Co., Ltd Tenda FH451 V1.0.0.9. The CVSS score is 7.5 with a severity of HIGH.
Official resources
CVE-2026-36785 was published on 2026-06-05T21:16:30.223Z and modified on 2026-06-08T17:16:42.283Z.