CVE-2026-3380Disclosure(tenda / f453)

MEDIUMCVSS 7.4 · HIGH

Exploitation observed; activity peaked at 5 mentions and remains active

Immediate actions

Prioritize remediation for tenda f453 systems immediately
Assume compromise if assets are exposed
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

A vulnerability was found in Tenda F453 1.0.0.3. This issue affects the function frmL7ImForm of the file /goform/L7Im. The manipulation of the argument page results in buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used.

tenda CVEs Back to dashboard

5.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/Litengzheng/vul_db/blob/main/F453/vul_81/README.md

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-119CWE-120

Priority

MEDIUM

Exploitation

ACTIVE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

f453
f453_firmware

Threat summary

Active exploitation appears in 1 classified signals
Public PoC is present in monitored signal
8 mentions across 4 observed days
Momentum state: stable

What's happening

Active exploitation reported across 1 signal
PoC mentioned or linked in 1 signal
Technical details provided in 6 signals
Disclosure: 5 classified signals
General: 1 classified signal
Peaked 2d ago at 5 mentions (2026-03-01); latest day: 1
8 total mentions across 4 days

Affected systems

Vendors

tenda

Products

f453f453_firmware

2 versions affected across 2 products

Deep dive

Activity timeline8 mentions / 4d

Signal classification4 categories

Disclosure

562.5%

General

112.5%

Active Exploitation

112.5%

Exploit

112.5%

Referenced assets7 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-28	1	General1
2026-03-01	5	Active Exploitation1Disclosure3Exploit1
2026-03-05	1	Disclosure1
2026-03-06	1	Disclosure1

Full discourse8 posts

CRAC Learning - Tech@cracbot219d
Disclosure
CVE-2026-3380 (CVSS:7.4, HIGH) is Analyzed. A vulnerability was found in Tenda F453 1.0.0.3. This issue affects the function frmL7ImForm of the file /goform/L7Im. T..https://nvd.nist.gov/vuln/detail/CVE-2026-3380 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-3380 discovered in Tenda F453 firmware, detailing its CVSS score and the affected function, but offers no POC, exploit code, patch information, or evidence of active exploitation.
0000019
173 followersView on X
CRAC Learning - Tech@cracbot220d
Disclosure
CVE-2026-3380 (CVSS:7.4, HIGH) is Analyzed. A vulnerability was found in Tenda F453 1.0.0.3. This issue affects the function frmL7ImForm of the file /goform/L7Im. T..https://nvd.nist.gov/vuln/detail/CVE-2026-3380 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post reports a high‑severity vulnerability in the Tenda F453, detailing the affected function and CVSS score, but it provides no PoC, exploit, or mitigation information.
0000023
173 followersView on X
Infoflowcloud@infoflowcloud224d
Disclosure
🚨*CVE* CVE-2026-3380 A vulnerability was found in Tenda F453 1.0.0.3. This issue affects the function frmL7ImForm of the file /goform/L7Im. The manipulation of the argument page results in … https://www.cve.org/CVERecord?id=CVE-2026-3380 ----- Traducción: CVE-2026-3380 Se … http://infoflow.cloud`
Post summary
A new vulnerability (CVE‑2026‑3380) was disclosed in Tenda F453 firmware, affecting the frmL7ImForm function via manipulation of the page argument.
0000044
55 followersView on X
CVE@CVEnew224d
Disclosure
CVE-2026-3380 A vulnerability was found in Tenda F453 1.0.0.3. This issue affects the function frmL7ImForm of the file /goform/L7Im. The manipulation of the argument page results in … https://www.cve.org/CVERecord?id=CVE-2026-3380
Post summary
A vulnerability (CVE-2026-3380) was identified in Tenda F453 firmware affecting the frmL7ImForm function, with manipulation of the page argument potentially leading to exploitation.
00000395
56.6K followersView on X
VulDB 🛡@vuldb224d
Active Exploitation
Our CTI team identified a lot of activities targeting Tenda F453 (CVE-2026-3380) https://vuldb.com/?ctiid.348265
Post summary
CTI team reports widespread activity targeting Tenda F453 via CVE-2026-3380, indicating active exploitation in the wild.
0000077
2.1K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash224d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3380 - Tenda F453 L7Im frmL7ImForm buffer overflow Intel Report: https://ift.tt/ReFfNK7
Post summary
The alert announces CVE-2026-3380, a buffer overflow vulnerability in Tenda F453 firmware, and provides a link to an Intel report for further details.
0000051
343 followersView on X
CVEFind.com@CveFindCom224d
Exploit
[CVE-2026-3380: HIGH] Vulnerability in Tenda F453 1.0.0.3 discovered, allowing remote buffer overflow attack via manipulation of frmL7ImForm function in /goform/L7Im file. Public exploit available.#cve,CVE-2026-3380,#cybersecurity https://cvefind.com/CVE-2026-3380
Post summary
The post announces a remote buffer overflow vulnerability (CVE-2026-3380) in Tenda F453 firmware and notes that a public exploit is available, but no patch or mitigation is referenced.
0000076
587 followersView on X
VulDB 🛡@vuldb225d
General
We have just added an important vulnerability affecting Tenda F453 (CVE-2026-3380) https://vuldb.com/?id.348265
Post summary
A new vulnerability (CVE-2026-3380) affecting the Tenda F453 has been logged, with a link to a vulnerability database entry but no further details or actionable information.
0000080
2.1K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	tenda	f453	-	-	-
OS	tenda	f453_firmware	1.0.0.3	-	-

Explore more

Back to dashboard tenda CVEs f453 vulnerabilities

What researchers are saying

CVE-2026-3380

CRAC Learning - Tech@cracbotDisclosure

The post announces CVE-2026-3380 discovered in Tenda F453 firmware, detailing its CVSS score and the affected function, but offers no POC, exploit code, patch information, or evidence of active exploitation.

CRAC Learning - Tech@cracbotDisclosure

The post reports a high‑severity vulnerability in the Tenda F453, detailing the affected function and CVSS score, but it provides no PoC, exploit, or mitigation information.

Infoflowcloud@infoflowcloudDisclosure

A new vulnerability (CVE‑2026‑3380) was disclosed in Tenda F453 firmware, affecting the frmL7ImForm function via manipulation of the page argument.

CVE@CVEnewDisclosure

A vulnerability (CVE-2026-3380) was identified in Tenda F453 firmware affecting the frmL7ImForm function, with manipulation of the page argument potentially leading to exploitation.

VulDB 🛡@vuldbActive Exploitation

CTI team reports widespread activity targeting Tenda F453 via CVE-2026-3380, indicating active exploitation in the wild.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashDisclosure

The alert announces CVE-2026-3380, a buffer overflow vulnerability in Tenda F453 firmware, and provides a link to an Intel report for further details.

CVEFind.com@CveFindComExploit

The post announces a remote buffer overflow vulnerability (CVE-2026-3380) in Tenda F453 firmware and notes that a public exploit is available, but no patch or mitigation is referenced.

VulDB 🛡@vuldbGeneral

A new vulnerability (CVE-2026-3380) affecting the Tenda F453 has been logged, with a link to a vulnerability database entry but no further details or actionable information.