CVE-2026-3768: Tenda F453 WrlExtraSet formWrlExtraSet stack-based overflow
A security vulnerability has been detected in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSet. The manipulation of the argument GO leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3768?
CVE-2026-3768 is a critical severity vulnerability due to the potential for stack-based buffer overflow.
How do I fix CVE-2026-3768?
To fix CVE-2026-3768, update the Tenda F453 firmware to the latest version provided by Tenda.
What systems are affected by CVE-2026-3768?
CVE-2026-3768 affects Tenda F453 routers running the firmware version 1.0.0.3.
What is the impact of CVE-2026-3768?
The impact of CVE-2026-3768 can lead to remote code execution due to unauthorized access via stack-based overflow.
When was CVE-2026-3768 disclosed?
CVE-2026-3768 was disclosed in 2026, highlighting a significant vulnerability in Tenda's product line.