Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.4
Tenda F453 Router: Remote Code Execution through URL Manipulation
CVE-2026-3377
Summary
A security issue in the Tenda F453 router's URL filtering function allows an attacker to potentially execute malicious code on the device by manipulating the URL. This could lead to unauthorized access or data theft. Update the router to the latest firmware version to address this vulnerability.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions | Fix available |
|---|---|---|---|
| tenda | f453_firmware | 1.0.0.3 | – |
Original title
A vulnerability was detected in Tenda F453 1.0.0.3. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Performing a manipulation of the argument page result...
Original description
A vulnerability was detected in Tenda F453 1.0.0.3. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Performing a manipulation of the argument page results in buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.
nvd CVSS2.0
9.0
nvd CVSS3.1
8.8
nvd CVSS4.0
7.4
Vulnerability type
CWE-119
Buffer Overflow
CWE-120
Classic Buffer Overflow
- https://github.com/Litengzheng/vul_db/blob/main/F453/vul_77/README.md Exploit Third Party Advisory
- https://vuldb.com/?ctiid.348262 Permissions Required VDB Entry
- https://vuldb.com/?id.348262 Third Party Advisory VDB Entry
- https://vuldb.com/?submit.759624 Third Party Advisory VDB Entry
- https://www.tenda.com.cn/ Product
Published: 1 Mar 2026 · Updated: 13 Mar 2026 · First seen: 6 Mar 2026