Tenda f453 Firmware vulnerabilities

30 CVEs affecting Tenda f453 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-6989, published 2026-04-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-4554, published 2026-03-22. High severity, CVSS 8.8. EPSS: 6.5% chance of exploitation in the next 30 days. A security flaw has been discovered in Tenda F453 1.0.0.3. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac results in…
CVE-2026-6989, published 2026-04-25. High severity, CVSS 8.8. EPSS: 6.3% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda F453 up to 1.0.0.3. Impacted is the function TendaTelnet of the file /goform/telnet of the component Telnet Service. Such manipulation leads to command…
CVE-2026-3271, published 2026-02-27. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability was found in Tenda F453 1.0.0.3. This impacts the function fromP2pListFilter of the file /goform/P2pListFilterof of the component httpd. The manipulation of the argument page results…
CVE-2026-3377, published 2026-03-01. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability was detected in Tenda F453 1.0.0.3. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Performing a manipulation of the argument page results…
CVE-2026-3376, published 2026-02-28. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A security vulnerability has been detected in Tenda F453 1.0.0.3. Affected by this vulnerability is the function fromSafeMacFilter of the file /goform/SafeMacFilter. Such manipulation of the argument…
CVE-2026-3275, published 2026-02-27. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A weakness has been identified in Tenda F453 1.0.0.3. This affects the function fromAddressNat of the file /goform/addressNat of the component httpd. Executing a manipulation of the argument entrys…
CVE-2026-3274, published 2026-02-27. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A security flaw has been discovered in Tenda F453 1.0.0.3. Affected by this issue is the function frmL7ProtForm of the file /goform/L7Prot of the component httpd. Performing a manipulation of the…
CVE-2026-3273, published 2026-02-27. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability was identified in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component httpd. Such manipulation of…
CVE-2026-3272, published 2026-02-27. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability was determined in Tenda F453 1.0.0.3. Affected is the function fromDhcpListClient of the file /goform/DhcpListClient of the component httpd. This manipulation of the argument page…
CVE-2026-3169, published 2026-02-25. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A security vulnerability has been detected in Tenda F453 1.0.0.3. This impacts the function fromSafeEmailFilter of the file /goform/SafeEmailFilter of the component httpd. The manipulation of the…

Latest

CVE-2026-5021, published 2026-03-29. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromPPTPUserSetting of the file /goform/PPTPUserSetting of the component httpd. This manipulation of the argument delno causes…
CVE-2026-4553, published 2026-03-22. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was identified in Tenda F453 1.0.0.3. Impacted is the function fromNatlimit of the file /goform/Natlimit of the component Parameters Handler. The manipulation of the argument page…
CVE-2026-4552, published 2026-03-22. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was determined in Tenda F453 1.0.0.3. This issue affects the function fromVirtualSer of the file /goform/VirtualSer of the component Parameters Handler. Executing a manipulation of…
CVE-2026-4551, published 2026-03-22. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was found in Tenda F453 1.0.0.3. This vulnerability affects the function fromSafeClientFilter of the file /goform/SafeClientFilter of the component Parameters Handler. Performing a…
CVE-2026-3769, published 2026-03-08. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was detected in Tenda F453 1.0.0.3. Affected by this issue is the function WrlclientSet of the file /goform/WrlclientSet. The manipulation of the argument GO results in stack-based…
CVE-2026-3768, published 2026-03-08. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A security vulnerability has been detected in Tenda F453 1.0.0.3. Affected by this vulnerability is the function formWrlExtraSet of the file /goform/WrlExtraSet. The manipulation of the argument GO…
CVE-2026-3732, published 2026-03-08. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A security vulnerability has been detected in Tenda F453 1.0.0.3. This affects the function strcpy of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to stack-based…
CVE-2026-3729, published 2026-03-08. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was identified in Tenda F453 1.0.0.3/3.As. Impacted is the function fromPptpUserAdd of the file /goform/PPTPDClient. Such manipulation of the argument username/opttype leads to…