CVE-2026-3273Disclosure(tenda / f453)

LOWCVSS 7.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was identified in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component httpd. Such manipulation of the argument mit_ssid_index leads to buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.

tenda CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/Litengzheng/vul_db/blob/main/F453/vul_73/README.md

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-119CWE-120

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

f453
f453_firmware

Threat summary

6 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 6 signals
Disclosure: 5 classified signals
Exploit: 1 classified signal
Peaked 2d ago at 4 mentions (2026-02-27); latest day: 1
6 total mentions across 3 days

Affected systems

Vendors

tenda

Products

f453f453_firmware

2 versions affected across 2 products

Deep dive

Activity timeline6 mentions / 3d

Signal classification2 categories

Disclosure

583.3%

Exploit

116.7%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-27	4	Disclosure3Exploit1
2026-03-03	1	Disclosure1
2026-03-04	1	Disclosure1

Full discourse6 posts

CRAC Learning - Tech@cracbot219d
Disclosure
CVE-2026-3273 (CVSS:7.4, HIGH) is Analyzed. A vulnerability was identified in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrlsafeset of t..https://nvd.nist.gov/vuln/detail/CVE-2026-3273 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-3273, a high‑severity vulnerability in Tenda F453 firmware, noting the affected function and linking to the NVD entry.
0000022
173 followersView on X
CRAC Learning - Tech@cracbot220d
Disclosure
CVE-2026-3273 (CVSS:7.4, HIGH) is Analyzed. A vulnerability was identified in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrlsafeset of t..https://nvd.nist.gov/vuln/detail/CVE-2026-3273 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE‑2026‑3273, noting its CVSS score, affected Tenda device, and vulnerable function, but offers no PoC, exploit, or mitigation details.
0000036
173 followersView on X
Infoflowcloud@infoflowcloud223d
Disclosure
🚨*CVE* CVE-2026-3273 A vulnerability was identified in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the componen… https://www.cve.org/CVERecord?id=CVE-2026-3273 ----- Traducción: CVE-2026-3273 Se … http://infoflow.cloud`
Post summary
The post announces CVE-2026-3273 affecting the formWrlsafeset function of Tenda F453, providing a link to the CVE record but lacking PoC, exploit, patch, or active exploitation details.
0000024
55 followersView on X
CVE@CVEnew223d
Disclosure
CVE-2026-3273 A vulnerability was identified in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the componen… https://www.cve.org/CVERecord?id=CVE-2026-3273
Post summary
A CVE-2026-3273 vulnerability has been identified in Tenda F453 firmware 1.0.0.3 affecting the formWrlsafeset function in /goform/AdvSetWrlsafeset. No PoC, exploit, patch, or exploitation reports are mentioned.
00000147
56.6K followersView on X
CVETodo@CveTodo224d
Disclosure
**CVE-2026-3273** is a high-severity remote buffer overflow vulnerability affecting the **Tenda F453** router firmware version **1.0.0.3**. The flaw resides specifically within the `formWrlsafeset` function located in the `/goform/AdvSetWrlsafeset` endpoint of the embedded HTTP daemon (`httpd`). An attacker can exploit this vulnerability by manipulating the `mit_ssid_index` argument in the HTTP request, leading to a buffer overflow condition. #Cybersecurity #CVE #HighSeverity #SecurityAlert #RemoteCodeExecution #DDoS #BufferOverflow https://cvetodo.com/cve/CVE-2026-3273
Post summary
This post announces a high‑severity remote buffer overflow in the Tenda F453 router’s firmware (1.0.0.3) affecting the formWrlsafeset function; it provides technical details but no PoC, patch, or active exploitation information.
0000044
20 followersView on X
CVEFind.com@CveFindCom224d
Exploit
[CVE-2026-3273: HIGH] Remote buffer overflow vulnerability identified in Tenda F453 1.0.0.3 component httpd. Exploit publicly available. Stay vigilant against cyber attacks.#cve,CVE-2026-3273,#cybersecurity https://cvefind.com/CVE-2026-3273
Post summary
The post announces a remote buffer overflow in the Tenda F453 and notes that a publicly available exploit exists, urging vigilance.
0000065
585 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	tenda	f453	-	-	-
OS	tenda	f453_firmware	1.0.0.3	-	-

Explore more

Back to dashboard tenda CVEs f453 vulnerabilities

What researchers are saying

CVE-2026-3273

CVETodo[verified]@CveTodoDisclosure

This post announces a high‑severity remote buffer overflow in the Tenda F453 router’s firmware (1.0.0.3) affecting the formWrlsafeset function; it provides technical details but no PoC, patch, or active exploitation information.

CRAC Learning - Tech@cracbotDisclosure

The post announces CVE-2026-3273, a high‑severity vulnerability in Tenda F453 firmware, noting the affected function and linking to the NVD entry.

CRAC Learning - Tech@cracbotDisclosure

The post announces CVE‑2026‑3273, noting its CVSS score, affected Tenda device, and vulnerable function, but offers no PoC, exploit, or mitigation details.

Infoflowcloud@infoflowcloudDisclosure

The post announces CVE-2026-3273 affecting the formWrlsafeset function of Tenda F453, providing a link to the CVE record but lacking PoC, exploit, patch, or active exploitation details.

CVE@CVEnewDisclosure

A CVE-2026-3273 vulnerability has been identified in Tenda F453 firmware 1.0.0.3 affecting the formWrlsafeset function in /goform/AdvSetWrlsafeset. No PoC, exploit, patch, or exploitation reports are mentioned.

CVEFind.com@CveFindComExploit

The post announces a remote buffer overflow in the Tenda F453 and notes that a publicly available exploit exists, urging vigilance.