Home / Vulnerability Intelligence / CVE-2026-3378

CVE-2026-3378 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: March 3, 2026

Tenda F453 - Buffer Overflow

Published: March 1, 2026Updated: March 3, 2026PoC AvailableRemote Exploitable

Overview

Tenda F453 1.0.0.3 contains a buffer overflow caused by manipulation of the "qos" argument in /goform/qossetting, letting remote attackers cause memory corruption, exploit requires no special privileges.

Severity & Score

Severity: High

CVSS Score: 8.8

EPSS Score: 4.6%(Probability of exploitation in next 30 days)

Impact

Remote attackers can cause memory corruption, potentially leading to denial of service or code execution.

Mitigation

Update to the latest version.

References

Social Media Activity(2 posts)

Offensive Sequence

@offseq

Mar 1, 2026

🔥 CVE-2026-3378 (HIGH, CVSS 8.7): Buffer overflow in Tenda F453 (FW 1.0.0.3) lets remote attackers execute code or cause DoS — no authentication needed. PoC exploit published. Patch or restrict access now! https://radar.offseq.com/threat/cve-2026-3378-buffer-overflow-in-tenda-f453-0b5023a3 #OffSeq #Vulnerability #Tenda #RouterSecurity

View original post

TheHackerWire

@thehackerwire

Mar 1, 2026

🟠 CVE-2026-3378 - High (8.8) A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromqossetting of the file /goform/qossetting. Executing a manipulation of the argument qos can lead to buffer overflow. The attack can be launched remotely. The exploit has be... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-3378/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

Details

CVE ID: CVE-2026-3378
Severity: High
CVSS Score: 8.8
Type: buffer_overflow
Status: confirmed
EPSS: 4.6%
Social Posts: 2

CWE

CWE-119

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

4.6%Probability of exploitation in the next 30 days