Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.4
Tenda F453 Software Allows Remote Attackers to Overwrite Memory
CVE-2026-3166
Summary
A security flaw in the Tenda F453 router allows hackers to potentially execute malicious code on the device. This could happen if a hacker sends a specially crafted request to the router's internet interface. To stay safe, update the router to the latest version as soon as possible.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions | Fix available |
|---|---|---|---|
| tenda | f453_firmware | 1.0.0.3 | – |
Original title
A vulnerability was identified in Tenda F453 1.0.0.3. The affected element is the function fromRouteStatic of the file /goform/RouteStatic of the component httpd. Such manipulation of the argument ...
Original description
A vulnerability was identified in Tenda F453 1.0.0.3. The affected element is the function fromRouteStatic of the file /goform/RouteStatic of the component httpd. Such manipulation of the argument page leads to buffer overflow. The attack can be launched remotely. The exploit is publicly available and might be used.
nvd CVSS2.0
9.0
nvd CVSS3.1
8.8
nvd CVSS4.0
7.4
Vulnerability type
CWE-119
Buffer Overflow
CWE-120
Classic Buffer Overflow
- https://github.com/Litengzheng/vul_db/blob/main/F453/vul_65/README.md Exploit Third Party Advisory
- https://vuldb.com/?ctiid.347673 Permissions Required VDB Entry
- https://vuldb.com/?id.347673 Third Party Advisory VDB Entry
- https://vuldb.com/?submit.759589 Third Party Advisory VDB Entry
- https://www.tenda.com.cn/ Product
Published: 25 Feb 2026 · Updated: 12 Mar 2026 · First seen: 6 Mar 2026