CVE-2026-3398

Name of the Vulnerable Software and Affected Versions Tenda F453 version 1.0.0.3

Description A buffer overflow issue exists in the httpd component of the Tenda F453. The issue is located in the fromAdvSetWan function within the /goform/AdvSetWan file. Manipulation of the wanmode/PPPOEPassword argument can trigger the overflow. The exploit has been publicly disclosed.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the /goform/AdvSetWan file.