Cyber Posture

CVE-2026-3275

HighPublic PoC

Published: 27 February 2026

Published
27 February 2026
Modified
27 February 2026
KEV Added
Patch
CVSS Score 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0004 11.0th percentile
Risk Priority 18 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2026-3275 is a high-severity Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) vulnerability in Tenda F453 Firmware. Its CVSS base score is 8.8 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 11.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).

Threat & Defense at a Glance

What attackers do: exploitation maps to Exploitation for Privilege Escalation (T1068) and 1 other technique. What defenders deploy: see the NIST 800-53 controls recommended below.
Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

prevent

Directly validates the 'entrys' argument in the /goform/addressNat function to prevent buffer overflow exploitation.

prevent

Remediates the specific buffer overflow flaw in the httpd component through identification, reporting, and timely patching of the Tenda F453 firmware.

prevent

Implements memory safeguards such as ASLR and DEP to mitigate arbitrary code execution even if the buffer overflow in fromAddressNat is triggered.

MITRE ATT&CK Enterprise TechniquesAI

T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
Why these techniques?

Buffer overflow in authenticated web interface (httpd) of network device enables remote code execution/device compromise from low-priv access, directly facilitating T1190 (public-facing app exploitation) and T1068 (post-auth privilege escalation).

Confidence: MEDIUM · MITRE ATT&CK Enterprise v18.1

NVD Description

A weakness has been identified in Tenda F453 1.0.0.3. This affects the function fromAddressNat of the file /goform/addressNat of the component httpd. Executing a manipulation of the argument entrys can lead to buffer overflow. The attack may be performed from…

more

remote. The exploit has been made available to the public and could be used for attacks.

Deeper analysisAI

CVE-2026-3275 is a buffer overflow vulnerability (CWE-119, CWE-120) affecting the Tenda F453 router on firmware version 1.0.0.3. The flaw exists in the fromAddressNat function within the /goform/addressNat file of the httpd component. Manipulating the entrys argument triggers the buffer overflow condition.

The vulnerability carries a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), denoting high severity with network accessibility, low attack complexity, and low privileges required. A remote, authenticated attacker can exploit it without user interaction, potentially achieving high impacts on confidentiality, integrity, and availability, such as arbitrary code execution or device compromise. A public exploit is available.

Advisories and further details appear in references including VulDB entries (ctiid.347999, id.347999, submit.759622), a GitHub repository at Litengzheng/vul_db with exploit code, and the Tenda website (tenda.com.cn). No specific patch or mitigation steps are detailed in the disclosure. The CVE was published on 2026-02-27T02:16:20.747.

Details

CWE(s)

Affected Products

tenda
f453 firmware
1.0.0.3

CVEs Like This One

CVE-2026-3273Same product: Tenda F453
CVE-2026-3378Same product: Tenda F453
CVE-2026-3380Same product: Tenda F453
CVE-2026-3169Same product: Tenda F453
CVE-2026-3274Same product: Tenda F453
CVE-2026-3168Same product: Tenda F453
CVE-2026-3165Same product: Tenda F453
CVE-2026-3376Same product: Tenda F453
CVE-2026-3377Same product: Tenda F453
CVE-2026-3398Same product: Tenda F453

References