PT-2026-27019 · Tenda · F453

Ltzhust · Published 2026-03-22 · Updated 2026-03-22 · CVE-2026-4554

NVD

CVSS v2.0

6.5

Medium

AV:N/AC:L/Au:S/C:P/I:P/A:P

A security flaw has been discovered in Tenda F453 1.0.0.3. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.

Exploit

Fix

Command Injection

Special Elements Injection

Weakness Enumeration

CWE-77

CWE-74

Related Identifiers

CVE-2026-4554

Affected Products

F453

References · 6

• 🔥 https://github.com/Litengzheng/vul_db/blob/main/F453/vul_95/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4554 · Security Note
• https://vuldb.com/?ctiid.352381 · Note
• https://vuldb.com/?submit.774933 · Note
• https://tenda.com.cn · Note
• https://vuldb.com/?id.352381 · Note