VYPR
Unrated severityNVD Advisory· Published Feb 25, 2026· Updated Feb 25, 2026

Tenda F453 httpd RouteStatic fromRouteStatic buffer overflow

CVE-2026-3166

Description

A vulnerability was identified in Tenda F453 1.0.0.3. The affected element is the function fromRouteStatic of the file /goform/RouteStatic of the component httpd. Such manipulation of the argument page leads to buffer overflow. The attack can be launched remotely. The exploit is publicly available and might be used.

Affected products

2
  • Tenda/F453llm-fuzzy
    Range: =1.0.0.3
  • Tenda/F453v5
    Range: 1.0.0.3

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.