CVE-2026-3727Disclosure(tenda / f453)

LOWCVSS 7.4 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Prioritize remediation for tenda f453 systems immediately
Hunt for exploitation attempts and persistence artifacts
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A vulnerability was found in Tenda F453 1.0.0.3. This vulnerability affects the function sub_3C6C0 of the file /goform/QuickIndex. The manipulation of the argument mit_linktype/PPPOEPassword results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used.

tenda CVEs Back to dashboard

2.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/Litengzheng/vul_db/blob/main/F453/vul_96/README.md

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-119CWE-121

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

f453
f453_firmware

Threat summary

Exploit tooling references are present in monitored signal
7 mentions across 5 observed days
Momentum state: stable

What's happening

Exploit tool or code specified in 1 signal
Technical details provided in 5 signals
Disclosure: 4 classified signals
General: 2 classified signals
Peaked 4d ago at 3 mentions (2026-03-08); latest day: 1
7 total mentions across 5 days

Affected systems

Vendors

tenda

Products

f453f453_firmware

2 versions affected across 2 products

Deep dive

Activity timeline7 mentions / 5d

Signal classification3 categories

Disclosure

457.1%

General

228.6%

Exploit

114.3%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-08	3	Disclosure1Exploit1General1
2026-03-09	1	Disclosure1
2026-03-12	1	Disclosure1
2026-03-13	1	Disclosure1
2026-04-06	1	General1

Full discourse7 posts

David@DavidMarquet19185d
General
📌 Top CVEs recientes (CVSS>=7.0): 1. ⚠️ CVE-2026-3734 (CVSS: 7.3) 2. 🧱 CVE-2026-3732 (CVSS: 8.8) 3. 🧱 CVE-2026-3729 (CVSS: 8.8) 4. 🧱 CVE-2026-3728 (CVSS: 8.8) 5. 🧱 CVE-2026-3727 (CVSS: 8.8) #CyberSecurity #CVE #Infosec
Post summary
The post lists several high‑CVSS CVEs without providing details on exploitation, patches, or technical specifics.
0000040
163 followersView on X
CRAC Learning - Tech@cracbot209d
Disclosure
CVE-2026-3727 (CVSS:7.4, HIGH) is Analyzed. A vulnerability was found in Tenda F453 1.0.0.3. This vulnerability affects the function sub_3C6C0 of the file /goform/Q..https://nvd.nist.gov/vuln/detail/CVE-2026-3727 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces the finding of CVE‑2026‑3727 in Tenda F453, provides basic technical details and links to the NVD entry, but does not discuss exploits, patches, or active attacks.
0000018
172 followersView on X
CRAC Learning - Tech@cracbot210d
Disclosure
CVE-2026-3727 (CVSS:7.4, HIGH) is Analyzed. A vulnerability was found in Tenda F453 1.0.0.3. This vulnerability affects the function sub_3C6C0 of the file /goform/Q..https://nvd.nist.gov/vuln/detail/CVE-2026-3727 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-3727, a high‑scoring vulnerability in a Tenda router, highlights technical details but provides no PoC, exploit, or patch information.
0000018
172 followersView on X
DailyCVE@dailycve213d
Disclosure
🔴 Tenda, Buffer Overflow, #CVE-2026-3727 (HIGH) https://dailycve.com/tenda-buffer-overflow-cve-2026-3727-high/
Post summary
The post announces a high‑severity buffer overflow vulnerability (CVE‑2026‑3727) affecting Tenda devices, with no exploit or mitigation details provided.
0000034
166 followersView on X
CVE@CVEnew214d
Disclosure
CVE-2026-3727 A vulnerability was found in Tenda F453 1.0.0.3. This vulnerability affects the function sub_3C6C0 of the file /goform/QuickIndex. The manipulation of the argument mit_… https://www.cve.org/CVERecord?id=CVE-2026-3727
Post summary
The text discloses a vulnerability in the Tenda F453 firmware, detailing the affected function and file, but it does not provide proof of concept, exploit code, active exploitation evidence, or a patch.
00000105
56.6K followersView on X
RedPacket Security@RedPacketSec214d
General
CVE Alert: CVE-2026-3727 - Tenda - F453 - https://www.redpacketsecurity.com/cve-alert-cve-2026-3727-tenda-f453/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-3727 #tenda #f453
Post summary
The tweet merely posts a link to a CVE alert for CVE-2026-3727 without offering additional details or actionable information.
0000084
3.5K followersView on X
CVEFind.com@CveFindCom214d
Exploit
[CVE-2026-3727: HIGH] Critical stack-based buffer overflow vulnerability found in Tenda F453 1.0.0.3. Exploit released, allowing remote attacks through manipulation of argument mit_linktype/PPPOEPassword in /g...#cve,CVE-2026-3727,#cybersecurity https://cvefind.com/CVE-2026-3727
Post summary
Exploit released for CVE-2026-3727, a critical stack‑based buffer overflow in the Tenda F453 1.0.0.3 firmware, enabling remote attacks via manipulation of specific arguments.
0000059
600 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	tenda	f453	-	-	-
OS	tenda	f453_firmware	1.0.0.3	-	-

Explore more

Back to dashboard tenda CVEs f453 vulnerabilities

What researchers are saying

CVE-2026-3727

David@DavidMarquet19General

The post lists several high‑CVSS CVEs without providing details on exploitation, patches, or technical specifics.

CRAC Learning - Tech@cracbotDisclosure

The post announces the finding of CVE‑2026‑3727 in Tenda F453, provides basic technical details and links to the NVD entry, but does not discuss exploits, patches, or active attacks.

CRAC Learning - Tech@cracbotDisclosure

The post announces CVE-2026-3727, a high‑scoring vulnerability in a Tenda router, highlights technical details but provides no PoC, exploit, or patch information.

DailyCVE@dailycveDisclosure

The post announces a high‑severity buffer overflow vulnerability (CVE‑2026‑3727) affecting Tenda devices, with no exploit or mitigation details provided.

CVE@CVEnewDisclosure

The text discloses a vulnerability in the Tenda F453 firmware, detailing the affected function and file, but it does not provide proof of concept, exploit code, active exploitation evidence, or a patch.

RedPacket Security@RedPacketSecGeneral

The tweet merely posts a link to a CVE alert for CVE-2026-3727 without offering additional details or actionable information.

CVEFind.com@CveFindComExploit

Exploit released for CVE-2026-3727, a critical stack‑based buffer overflow in the Tenda F453 1.0.0.3 firmware, enabling remote attacks via manipulation of specific arguments.