CVE-2026-3274 in F453

Résumé

par MITRE • 27/02/2026

A security flaw has been discovered in Tenda F453 1.0.0.3. Affected by this issue is the function frmL7ProtForm of the file /goform/L7Prot of the component httpd. Performing a manipulation of the argument page results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: VulDB
• Divulgation: 27/02/2026
• Modérer: accepté
• Entrée: VDB-347998
• CPE: prêt
• CWE: CWE-120 (confirmé)
• Exploitation: Télécharger
• CVSS: 8.8 (VulDB)
• EPSS: 0.00937
• KEV: non
• Activités: très faible
• Secteur: Government, Lawfirm, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-3274
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-3274
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-3274/