CVE-2026-3167Disclosure(tenda / f453)

LOWCVSS 7.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security flaw has been discovered in Tenda F453 1.0.0.3. The impacted element is the function formWebTypeLibrary of the file /goform/webtypelibrary of the component httpd. Performing a manipulation of the argument webSiteId results in buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.

tenda CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/Litengzheng/vul_db/blob/main/F453/vul_66/README.md

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-119CWE-120

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

f453
f453_firmware

Threat summary

6 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 5 signals
Disclosure: 5 classified signals
General: 1 classified signal
Peaked 1d ago at 5 mentions (2026-02-25); latest day: 1
6 total mentions across 2 days

Affected systems

Vendors

tenda

Products

f453f453_firmware

2 versions affected across 2 products

Deep dive

Activity timeline6 mentions / 2d

Signal classification2 categories

Disclosure

583.3%

General

116.7%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-25	5	Disclosure4General1
2026-03-02	1	Disclosure1

Full discourse6 posts

CRAC Learning - Tech@cracbot220d
Disclosure
CVE-2026-3167 (CVSS:7.4, HIGH) is Analyzed. A security flaw has been discovered in Tenda F453 1.0.0.3. The impacted element is the function formWebTypeLibrary of th..https://nvd.nist.gov/vuln/detail/CVE-2026-3167 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
A new vulnerability, CVE-2026-3167, with a CVSS score of 7.4 (HIGH) was identified in Tenda F453 firmware, affecting the formWebTypeLibrary function.
0000033
173 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds225d
Disclosure
CVE-2026-3167 Buffer Overflow in Tenda F453 Router via Malicious WebSiteId Argument https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3167
Post summary
A buffer overflow vulnerability (CVE-2026-3167) was disclosed for the Tenda F453 router, triggered by a malicious WebSiteId argument, with no PoC, exploit, patch, or active exploitation details provided.
0000033
4.0K followersView on X
CVE@CVEnew225d
Disclosure
CVE-2026-3167 A security flaw has been discovered in Tenda F453 1.0.0.3. The impacted element is the function formWebTypeLibrary of the file /goform/webtypelibrary of the component h… https://www.cve.org/CVERecord?id=CVE-2026-3167
Post summary
A new vulnerability (CVE-2026-3167) was identified in Tenda F453 firmware, affecting the formWebTypeLibrary function in the /goform/webtypelibrary component.
0000096
56.6K followersView on X
RedPacket Security@RedPacketSec225d
General
CVE Alert: CVE-2026-3167 - Tenda - F453 - https://www.redpacketsecurity.com/cve-alert-cve-2026-3167-tenda-f453/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-3167 #tenda #f453
Post summary
The post announces a CVE alert for Tenda F453 but offers no further details such as PoC, exploit, patch, or technical specifics.
0000078
3.5K followersView on X
CVEFind.com@CveFindCom225d
Disclosure
[CVE-2026-3167: HIGH] Security flaw in Tenda F453 1.0.0.3 component httpd allows remote attackers to trigger a buffer overflow via a webSiteId argument manipulation in the formWebTypeLibrary function. Exploit ...#cve,CVE-2026-3167,#cybersecurity https://cvefind.com/CVE-2026-3167
Post summary
The post announces a high‑severity buffer overflow vulnerability in Tenda F453’s httpd component, detailing the trigger via webSiteId manipulation, but does not provide PoC, exploit code, or patch information.
0000051
584 followersView on X
CVETodo@CveTodo225d
Disclosure
**CVE-2026-3167** pertains to a critical security flaw found in the Tenda F453 router firmware version 1.0.0.3. The vulnerability resides specifically within the `formWebTypeLibrary` function located in the `/goform/webtypelibrary` component of the `httpd` web server. The flaw allows an attacker to perform a buffer overflow by manipulating the `webSiteId` argument, potentially leading to remote code execution. #Cybersecurity #CVE #HighSeverity #SecurityAlert #RemoteCodeExecution #BufferOverflow https://cvetodo.com/cve/CVE-2026-3167
Post summary
The post announces CVE‑2026‑3167, a buffer overflow in Tenda F453 firmware that could lead to remote code execution, but provides no PoC, exploit, or patch information.
0000045
20 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	tenda	f453	-	-	-
OS	tenda	f453_firmware	1.0.0.3	-	-

Explore more

Back to dashboard tenda CVEs f453 vulnerabilities

What researchers are saying

CVE-2026-3167

CVETodo[verified]@CveTodoDisclosure

The post announces CVE‑2026‑3167, a buffer overflow in Tenda F453 firmware that could lead to remote code execution, but provides no PoC, exploit, or patch information.

CRAC Learning - Tech@cracbotDisclosure

A new vulnerability, CVE-2026-3167, with a CVSS score of 7.4 (HIGH) was identified in Tenda F453 firmware, affecting the formWebTypeLibrary function.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A buffer overflow vulnerability (CVE-2026-3167) was disclosed for the Tenda F453 router, triggered by a malicious WebSiteId argument, with no PoC, exploit, patch, or active exploitation details provided.

CVE@CVEnewDisclosure

A new vulnerability (CVE-2026-3167) was identified in Tenda F453 firmware, affecting the formWebTypeLibrary function in the /goform/webtypelibrary component.

RedPacket Security@RedPacketSecGeneral

The post announces a CVE alert for Tenda F453 but offers no further details such as PoC, exploit, patch, or technical specifics.

CVEFind.com@CveFindComDisclosure

The post announces a high‑severity buffer overflow vulnerability in Tenda F453’s httpd component, detailing the trigger via webSiteId manipulation, but does not provide PoC, exploit code, or patch information.