CVE-2026-2911 in FH451

Zusammenfassung

von MITRE • 22.02.2026

A vulnerability has been found in Tenda FH451 up to 1.0.0.9. This issue affects some unknown processing of the file /goform/GstDhcpSetSer. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Zuständig: VulDB
• Veröffentlichung: 22.02.2026
• Moderieren: akzeptiert
• Eintrag: VDB-347220
• CPE: bereit
• CWE: CWE-120 (bestätigt)
• Exploit: Download
• CVSS: 8.8 (CNA)
• EPSS: 0.03075
• KEV: nein
• Aktivitäten: very low
• Sektor: Hostingprovider, Insurance, ...

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-2911
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-2911
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-2911/