Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. Affected is the function sub_427C3C of the file /goform/SafeMacFilter. This manipulation of the argument page causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
There is a new vulnerability with elevated criticality in Tenda 4G300 (CVE-2026-7470) https://vuldb.com/vuln/360206
Post summary
A new critical vulnerability (CVE-2026-7470) affecting the Tenda 4G300 router has been announced.
CVE-2026-7470 Remote Code Execution via Stack-Based Buffer Overflow in Tenda 4G300 Firmware https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7470
Post summary
A brief disclosure notes a stack-based buffer overflow that enables RCE on Tenda 4G300 firmware, with no PoC, exploit, patch, or active exploitation details offered.
⚠️ HIGH — CVE-2026-7470 A flaw has been found in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. Affected is the function sub_427C3C of the file … CVSS 8.8 Full analysis → https://sec.kaitan.id/cves/CVE-2026-7470 #Tenda #CyberSecurity #InfoSec
Post summary
The post announces CVE-2026-7470, a high‑severity flaw affecting a specific function in a Tenda 4G300 device, and provides a CVSS score plus a link to detailed analysis.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | 4g300 | - | - | - |
| OS | tenda | 4g300_firmware | 1.01.42_cn_tdc01 | - | - |