LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →

CVE-2026-3275 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: February 27, 2026

Tenda F453 - Buffer Overflow

Published: February 27, 2026Updated: February 27, 2026PoC AvailableRemote Exploitable

Overview

Tenda F453 1.0.0.3 contains a buffer overflow caused by manipulation of the "entrys" argument in /goform/addressNat httpd component, letting remote attackers execute arbitrary code, exploit requires crafted request.

Severity & Score

Severity: High
CVSS Score: 8.8
EPSS Score: 7.6%(Probability of exploitation in next 30 days)

Impact

Remote attackers can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to the latest version.

Social Media Activity(1 post)

TheHackerWire
TheHackerWire
@thehackerwire
Feb 27, 2026

🟠 CVE-2026-3275 - High (8.8) A weakness has been identified in Tenda F453 1.0.0.3. This affects the function fromAddressNat of the file /goform/addressNat of the component httpd. Executing a manipulation of the argument entrys can lead to buffer overflow. The attack may be pe... šŸ”— https://www.thehackerwire.com/vulnerability/CVE-2026-3275/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Details

CVE ID
CVE-2026-3275
Severity
High
CVSS Score
8.8
Type
buffer_overflow
Status
confirmed
EPSS
7.6%
Social Posts
1

CWE

  • CWE-119

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

7.6%Probability of exploitation in the next 30 days