CVE-2026-3274: Tenda F453 httpd L7Prot frmL7ProtForm buffer overflow

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-02-27 · updated 2026-06-17
Weakness: CWE-119

Description

A security flaw has been discovered in Tenda F453 1.0.0.3. Affected by this issue is the function frmL7ProtForm of the file /goform/L7Prot of the component httpd. Performing a manipulation of the argument page results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.

Affected products

Tenda F453: 1.0.0.3

References

https://github.com/Litengzheng/vul_db/blob/main/F453/vul_74/README.md
https://vuldb.com/?ctiid.347998
https://vuldb.com/?id.347998
https://vuldb.com/?submit.759621
https://www.tenda.com.cn/

Get alerted when CVE-2026-3274 or the next vulnerability affects your stack