CVE-2026-11557

A weakness has been identified in Tenda F451 1.0.0.7/1.0.0.9. The affected element is the function fromNatlimit of the file /goform/Natlimit of the component Web Management Interface. Executing a manipulation of the argument page can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

• CWE-119
• CWE-121

• https://github.com/Robots10/IoT_vlu/blob/main/reports/Tenda/fromNatlimit/fromNatlimit.md
• https://vuldb.com/cve/CVE-2026-11557
• https://vuldb.com/submit/836477
• https://vuldb.com/vuln/369167
• https://vuldb.com/vuln/369167/cti
• https://www.tenda.com.cn/

Published

Jun 8, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-11551The Branda plugin for WordPress is vulnerable to privilege e…9.8
• CVE-2026-11552A vulnerability has been found in SourceCodester Onlne Exami…5.5
• CVE-2026-11553A vulnerability was found in Tenda HG7HG9 and HG10 300001138…8.8
• CVE-2026-11554A vulnerability was determined in TOTOLINK CP450 4.1.0cu.747…4.3
• CVE-2026-11555A vulnerability was identified in D-Link DGS-1100-08PD 1.00.…7.5
• CVE-2026-11556A security flaw has been discovered in Tenda F451 1.0.0.7/1.…8.8
• CVE-2026-11558A security vulnerability has been detected in CodeAstro Payr…6.3
• CVE-2026-11559A vulnerability was detected in CodeAstro Payroll System 1.0…6.3
• CVE-2026-1156A vulnerability was determined in Totolink LR350 9.3.5u.6369…8.8
• CVE-2026-11561Improper neutralization of special elements used in an expre…9.8
• CVE-2026-11562The WS Form LITE WordPress plugin before 1.11.8 does not ha…4.3
• CVE-2026-11563The Word Count and Social Shares WordPress plugin through 1.…9.6