CVE-2026-3165Disclosure(tenda / f453)

LOWCVSS 7.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was determined in Tenda F453 1.0.0.3. Impacted is the function fromSetWifiGusetBasic of the file /goform/AdvSetWrlsafeset of the component httpd. This manipulation of the argument mit_ssid causes buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

tenda CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/Litengzheng/vul_db/blob/main/F453/vul_64/README.md

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-119CWE-120

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

f453
f453_firmware

Threat summary

6 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 5 signals
Disclosure: 5 classified signals
General: 1 classified signal
Peaked 1d ago at 5 mentions (2026-02-25); latest day: 1
6 total mentions across 2 days

Affected systems

Vendors

tenda

Products

f453f453_firmware

2 versions affected across 2 products

Deep dive

Activity timeline6 mentions / 2d

Signal classification2 categories

Disclosure

583.3%

General

116.7%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-25	5	Disclosure4General1
2026-03-02	1	Disclosure1

Full discourse6 posts

CRAC Learning - Tech@cracbot220d
Disclosure
CVE-2026-3165 (CVSS:7.4, HIGH) is Analyzed. A vulnerability was determined in Tenda F453 1.0.0.3. Impacted is the function fromSetWifiGusetBasic of the file /goform..https://nvd.nist.gov/vuln/detail/CVE-2026-3165 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-3165, a high‑severity vulnerability in Tenda F453 firmware, detailing the affected function and file path, but provides no evidence of exploitation or mitigation.
0000037
173 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds225d
Disclosure
CVE-2026-3165 Buffer Overflow in Tenda F453 Router via Malicious SSID Parameter https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3165
Post summary
A buffer overflow vulnerability (CVE-2026-3165) was disclosed for the Tenda F453 router, triggered by a malicious SSID parameter, with no PoC, exploit, patch, or active exploitation details provided.
0000034
4.0K followersView on X
CVE@CVEnew225d
Disclosure
CVE-2026-3165 A vulnerability was determined in Tenda F453 1.0.0.3. Impacted is the function fromSetWifiGusetBasic of the file /goform/AdvSetWrlsafeset of the component httpd. This m… https://www.cve.org/CVERecord?id=CVE-2026-3165
Post summary
A vulnerability was identified in Tenda F453 firmware affecting the fromSetWifiGusetBasic function in the httpd component, but no PoC, exploit, or patch details are provided.
0000098
56.6K followersView on X
RedPacket Security@RedPacketSec225d
General
CVE Alert: CVE-2026-3165 - Tenda - F453 - https://www.redpacketsecurity.com/cve-alert-cve-2026-3165-tenda-f453/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-3165 #tenda #f453
Post summary
The post announces a CVE alert for Tenda F453 but provides no further details about exploitation, patches, or technical specifics.
0000076
3.5K followersView on X
CVEFind.com@CveFindCom225d
Disclosure
[CVE-2026-3165: HIGH] Critical buffer overflow vulnerability discovered in Tenda F453 router firmware. Attackers can exploit a flaw in the httpd component remotely by manipulating the mit_ssid argument. Be cau...#cve,CVE-2026-3165,#cybersecurity https://cvefind.com/CVE-2026-3165
Post summary
A high‑severity buffer overflow vulnerability (CVE‑2026‑3165) in the Tenda F453 router’s httpd component allows remote exploitation by manipulating the mit_ssid argument.
0000053
584 followersView on X
CVETodo@CveTodo225d
Disclosure
**CVE-2026-3165** pertains to a buffer overflow vulnerability found in the Tenda F453 router firmware version 1.0.0.3. The flaw resides specifically within the `fromSetWifiGusetBasic` function located in the `/goform/AdvSetWrlsafeset` component of the `httpd` service. The vulnerability is triggered by malicious manipulation of the `mit_ssid` argument, which, when exploited, can cause a buffer overflow, potentially leading to remote code execution. #Cybersecurity #CVE #HighSeverity #SecurityAlert #RemoteCodeExecution #DDoS #BufferOverflow https://cvetodo.com/cve/CVE-2026-3165
Post summary
The post announces CVE-2026-3165, a buffer overflow in Tenda F453 firmware that can lead to remote code execution, but provides no PoC, exploit, or patch information.
0000043
20 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	tenda	f453	-	-	-
OS	tenda	f453_firmware	1.0.0.3	-	-

Explore more

Back to dashboard tenda CVEs f453 vulnerabilities

What researchers are saying

CVE-2026-3165

CVETodo[verified]@CveTodoDisclosure

The post announces CVE-2026-3165, a buffer overflow in Tenda F453 firmware that can lead to remote code execution, but provides no PoC, exploit, or patch information.

CRAC Learning - Tech@cracbotDisclosure

The post announces CVE-2026-3165, a high‑severity vulnerability in Tenda F453 firmware, detailing the affected function and file path, but provides no evidence of exploitation or mitigation.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A buffer overflow vulnerability (CVE-2026-3165) was disclosed for the Tenda F453 router, triggered by a malicious SSID parameter, with no PoC, exploit, patch, or active exploitation details provided.

CVE@CVEnewDisclosure

A vulnerability was identified in Tenda F453 firmware affecting the fromSetWifiGusetBasic function in the httpd component, but no PoC, exploit, or patch details are provided.

RedPacket Security@RedPacketSecGeneral

The post announces a CVE alert for Tenda F453 but provides no further details about exploitation, patches, or technical specifics.

CVEFind.com@CveFindComDisclosure

A high‑severity buffer overflow vulnerability (CVE‑2026‑3165) in the Tenda F453 router’s httpd component allows remote exploitation by manipulating the mit_ssid argument.