← back
CVE-2026-3166

Tenda F453 httpd RouteStatic fromRouteStatic buffer overflow

CVSS 8.7 HIGHEPSS 0.6%CWE-119CWE-120
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.7EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
25 Feb 2026Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability was identified in Tenda F453 1.0.0.3. The affected element is the function fromRouteStatic of the file /goform/RouteStatic of the component httpd. Such manipulation of the argument page leads to buffer overflow. The attack can be launched remotely. The exploit is publicly available and might be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
Tenda · F453

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/Litengzheng/vul_db/blob/main/F453/vul_65/README.mdhttps://vuldb.com/?ctiid.347673https://vuldb.com/?id.347673https://vuldb.com/?submit.759589https://www.tenda.com.cn/