CVE-2026-3166

Tenda F453 httpd RouteStatic fromRouteStatic buffer overflow

CVSS 8.7 HIGHEPSS 0.6%CWE-119 CWE-120

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 8.7EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

25 fev 2026Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A vulnerability was identified in Tenda F453 1.0.0.3. The affected element is the function fromRouteStatic of the file /goform/RouteStatic of the component httpd. Such manipulation of the argument page leads to buffer overflow. The attack can be launched remotely. The exploit is publicly available and might be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

Produtos afetados

Tenda · F453

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/Litengzheng/vul_db/blob/main/F453/vul_65/README.md https://vuldb.com/?ctiid.347673 https://vuldb.com/?id.347673 https://vuldb.com/?submit.759589 https://www.tenda.com.cn/