CVE-2026-3271 HIGH

CVE-2026-3271: Tenda F453 httpd P2pListFilterof fromP2pListFilter buffer overflow

Vendor Tenda

Product F453

Weakness CWE-120

Published February 27, 2026

Last update February 27, 2026

View on NVD All CVEs

CVSS base score

8.7/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability was found in Tenda F453 1.0.0.3. This impacts the function fromP2pListFilter of the file /goform/P2pListFilterof of the component httpd. The manipulation of the argument page results in buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used.

Key dates

02Disclosure timeline

February 27, 2026 CVE published

February 27, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-3271 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/120.html

Related vulnerabilities

04Related CVE

CVE-2022-20890 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities CVE-2024-23973 Silicon Labs Gecko OS HTTP GET Request Handling Stack-based Buffer Overflow CVE-2020-36994 QlikView 12.50.20000.0 - 'FTP Server Address' Denial of Service CVE-2025-1365 GNU elfutils eu-readelf readelf.c process_symtab buffer overflow CVE-2022-29242 Buffer Overflow on creating key transport blob in GOST Engine