CVE-2026-3166

Name of the Vulnerable Software and Affected Versions Tenda F453 version 1.0.0.3

Description A buffer overflow issue exists in the fromRouteStatic function of the httpd component, specifically within the /goform/RouteStatic endpoint. Manipulation of the page argument in an HTTP request can trigger this condition. The exploit is publicly available.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the /goform/RouteStatic endpoint.