CVE-2026-3271

high

Description

A vulnerability was found in Tenda F453 1.0.0.3. This impacts the function fromP2pListFilter of the file /goform/P2pListFilterof of the component httpd. The manipulation of the argument page results in buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used.

References

https://vuldb.com/?submit.759601

https://vuldb.com/?id.347995

https://github.com/Litengzheng/vul_db/blob/main/F453/vul_70/README.md

https://www.tenda.com.cn/

https://vuldb.com/?ctiid.347995

Details

Source: Mitre, NVD

Published: 2026-02-27

Updated: 2026-02-27

Risk Information

CVSS v2

Base Score: 9

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

CVSS v4

Base Score: 8.7

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Severity: High

EPSS

EPSS: 0.00046