Unrated severityNVD Advisory· Published Feb 25, 2026· Updated Feb 25, 2026
Tenda F453 httpd webtypelibrary formWebTypeLibrary buffer overflow
CVE-2026-3167
Description
A security flaw has been discovered in Tenda F453 1.0.0.3. The impacted element is the function formWebTypeLibrary of the file /goform/webtypelibrary of the component httpd. Performing a manipulation of the argument webSiteId results in buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.
Affected products
2- Tenda/F453v5Range: 1.0.0.3
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- github.com/Litengzheng/vul_db/blob/main/F453/vul_66/README.mdmitreexploit
- vuldb.commitrethird-party-advisory
- vuldb.commitresignaturepermissions-required
- vuldb.commitrevdb-entrytechnical-description
- www.tenda.com.cnmitreproduct
News mentions
0No linked articles in our index yet.