CVE-2026-3271

Tenda F453 httpd P2pListFilterof fromP2pListFilter buffer overflow

CVSS 8.7 HIGHEPSS 0.8%CWE-119 CWE-120

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 8.7EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

27 fev 2026Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A vulnerability was found in Tenda F453 1.0.0.3. This impacts the function fromP2pListFilter of the file /goform/P2pListFilterof of the component httpd. The manipulation of the argument page results in buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

Produtos afetados

Tenda · F453

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/Litengzheng/vul_db/blob/main/F453/vul_70/README.md https://vuldb.com/?ctiid.347995 https://vuldb.com/?id.347995 https://vuldb.com/?submit.759601 https://www.tenda.com.cn/