CVE-2026-3378Disclosure(tenda / f453)

LOWCVSS 7.4 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromqossetting of the file /goform/qossetting. Executing a manipulation of the argument qos can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.

tenda CVEs Back to dashboard

1.5/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/Litengzheng/vul_db/blob/main/F453/vul_78/README.md

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-119CWE-120

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

f453
f453_firmware

Threat summary

Public PoC is present in monitored signal
8 mentions across 3 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Technical details provided in 8 signals
Disclosure: 7 classified signals
Exploit: 1 classified signal
Peaked 2d ago at 6 mentions (2026-03-01); latest day: 1
8 total mentions across 3 days

Affected systems

Vendors

tenda

Products

f453f453_firmware

2 versions affected across 2 products

Deep dive

Activity timeline8 mentions / 3d

Signal classification2 categories

Disclosure

787.5%

Exploit

112.5%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-01	6	Disclosure5Exploit1
2026-03-05	1	Disclosure1
2026-03-06	1	Disclosure1

Full discourse8 posts

CRAC Learning - Tech@cracbot216d
Disclosure
CVE-2026-3378 (CVSS:7.4, HIGH) is Analyzed. A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromqossetting of the file /goform/qossetting. Ex..https://nvd.nist.gov/vuln/detail/CVE-2026-3378 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces the discovery of CVE‑2026‑3378 in Tenda F453 routers, providing CVSS details and the affected function, but offers no PoC, exploit, patch, or active exploitation information.
0000021
173 followersView on X
CRAC Learning - Tech@cracbot217d
Disclosure
CVE-2026-3378 (CVSS:7.4, HIGH) is Analyzed. A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromqossetting of the file /goform/qossetting. Ex..https://nvd.nist.gov/vuln/detail/CVE-2026-3378 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces the discovery and severity of CVE-2026-3378 affecting Tenda F453 firmware, but it lacks evidence of active exploitation, a PoC, or an available fix.
0000022
173 followersView on X
CVEarity@CVEarity221d
Disclosure
⚡ New CVE Alert: CVE-2026-3378 📊Severity: 8.8 🚨Risk Level: High 🧩Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-3378 #CVE-2026-3378 #CVE #High #CyberSecurity #InfoSec https://t.co/peGXbUiAQ1
Post summary
A new high‑severity CVE (CVE‑2026‑3378) has been announced with a CVSS score of 8.8, affecting multiple unspecified products, but no further details or mitigation information are provided.
0000050
63 followersView on X
Infoflowcloud@infoflowcloud221d
Disclosure
🚨*CVE* CVE-2026-3378 A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromqossetting of the file /goform/qossetting. Executing a manipulation of the argument qos can l… https://www.cve.org/CVERecord?id=CVE-2026-3378 ----- Traducción: Se ha encontrado … http://infoflow.cloud`
Post summary
A new vulnerability, CVE-2026-3378, has been disclosed affecting Tenda F453 routers, detailing the impacted function and argument manipulation.
0000096
55 followersView on X
CVE@CVEnew221d
Disclosure
CVE-2026-3378 A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromqossetting of the file /goform/qossetting. Executing a manipulation of the argument qos can l… https://www.cve.org/CVERecord?id=CVE-2026-3378
Post summary
A vulnerability was identified in the Tenda F453 firmware affecting the qossetting function, but no exploit, patch, or active exploitation details are provided.
00000823
56.6K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash221d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3378 - Tenda F453 qossetting fromqossetting buffer overflow Intel Report: https://ift.tt/8JIM7es
Post summary
A new buffer overflow vulnerability (CVE-2026-3378) in Tenda F453's qossetting has been reported, with an Intel report linked, but no PoC, exploit, or patch details are provided.
0000050
343 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds221d
Disclosure
CVE-2026-3378 Tenda F453 Remote Buffer Overflow Vulnerability in QoS Settings Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3378
Post summary
A remote buffer overflow vulnerability (CVE-2026-3378) has been disclosed for the Tenda F453 router’s QoS settings function, with no PoC, exploit, or patch details provided.
00000105
4.0K followersView on X
CVEFind.com@CveFindCom221d
Exploit
[CVE-2026-3378: HIGH] Critical remote code execution vulnerability discovered in Tenda F453 1.0.0.3. Act on the fromqossetting function to trigger buffer overflow. Exploit available for remote attacks.#cve,CVE-2026-3378,#cybersecurity https://cvefind.com/CVE-2026-3378
Post summary
A critical RCE vulnerability (CVE-2026-3378) in the Tenda F453 router allows remote attackers to trigger a buffer overflow via the fromqossetting function, with an exploit already available.
0000065
587 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	tenda	f453	-	-	-
OS	tenda	f453_firmware	1.0.0.3	-	-

Explore more

Back to dashboard tenda CVEs f453 vulnerabilities

What researchers are saying

CVE-2026-3378

CRAC Learning - Tech@cracbotDisclosure

The post announces the discovery of CVE‑2026‑3378 in Tenda F453 routers, providing CVSS details and the affected function, but offers no PoC, exploit, patch, or active exploitation information.

CRAC Learning - Tech@cracbotDisclosure

The post announces the discovery and severity of CVE-2026-3378 affecting Tenda F453 firmware, but it lacks evidence of active exploitation, a PoC, or an available fix.

CVEarity@CVEarityDisclosure

A new high‑severity CVE (CVE‑2026‑3378) has been announced with a CVSS score of 8.8, affecting multiple unspecified products, but no further details or mitigation information are provided.

Infoflowcloud@infoflowcloudDisclosure

A new vulnerability, CVE-2026-3378, has been disclosed affecting Tenda F453 routers, detailing the impacted function and argument manipulation.

CVE@CVEnewDisclosure

A vulnerability was identified in the Tenda F453 firmware affecting the qossetting function, but no exploit, patch, or active exploitation details are provided.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashDisclosure

A new buffer overflow vulnerability (CVE-2026-3378) in Tenda F453's qossetting has been reported, with an Intel report linked, but no PoC, exploit, or patch details are provided.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A remote buffer overflow vulnerability (CVE-2026-3378) has been disclosed for the Tenda F453 router’s QoS settings function, with no PoC, exploit, or patch details provided.

CVEFind.com@CveFindComExploit

A critical RCE vulnerability (CVE-2026-3378) in the Tenda F453 router allows remote attackers to trigger a buffer overflow via the fromqossetting function, with an exploit already available.