The vulnerability CVE-2026-3377 affects Tenda F453 version 1.0.0.3 and involves a buffer overflow in the fromSafeUrlFilter function of the /goform/SafeUrlFilter component. Manipulating the 'page' argument remotely triggers the overflow, potentially allowing an attacker to execute arbitrary code or cause a denial of service. The CVSS 4.0 base score is 8.7, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. Exploit code is publicly available, but no vendor patch or official remediation guidance is currently documented.

Successful exploitation of this buffer overflow vulnerability could allow remote attackers to execute arbitrary code or disrupt the affected device's operation, impacting confidentiality, integrity, and availability. The vulnerability requires no privileges or user interaction and can be triggered over the network, making it a significant risk for affected devices running Tenda F453 1.0.0.3. Although an exploit is publicly available, there is no confirmation of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider limiting network exposure of the affected device and monitor vendor communications for updates. No vendor advisory or patch links are currently provided, so no official remediation steps can be recommended at this time.