Tenda F453 httpd DhcpListClient Buffer Overflow Vulnerability (CVE-2026-3272)

Tenda F453 1.0.0.3 HTTPD Goform/DhcpListClient Buffer Overflow Vulnerability CVE ID: CVE-2026-3272 Vulnerability Description: Critical buffer overflow vulnerability in the function within the file of the component. CVSS Meta Temp Score: 8.0 Current Exploit Price: $0-$5k CTI Interest Score: 2.77 Summary A critical vulnerability exists in Tenda F453 version 1.0.0.3. Manipulation of the argument results in a buffer overflow. This vulnerability is documented as CVE-2026-3272. The attack can be executed remotely, and an exploit is available. Details The function in the file of the component is vulnerable to buffer overflow due to improper input validation. Manipulation of the argument with unvalidated input leads to a buffer overflow vulnerability. The product copies an input buffer to an output buffer without verifying the size of the input buffer, resulting in a buffer overflow. Impacts include potential compromise of confidentiality, integrity, and availability. The vulnerability is associated with CWE-120. Known as CVE-2026-3272, the exploit is available on GitHub and is classified as a proof-of-concept. Additional Information The exploit is known to be easy to execute and can be launched remotely. Technical details and a public exploit are available and shared for download on GitHub.

Goal Reached Thanks to every supporter — we hit 100%!

Tenda F453 httpd DhcpListClient Buffer Overflow Vulnerability (CVE-2026-3272)