CVE-2026-3378 | Tenda F453 1.0.0.3 /goform/qossetting fromqossetting qos buffer overflow

A vulnerability described as critical has been identified in Tenda F453 1.0.0.3. This affects the function fromqossetting of the file /goform/qossetting. Executing a manipulation of the argument qos can lead to buffer overflow.

This vulnerability is tracked as CVE-2026-3378. The attack can be launched remotely. Moreover, an exploit is present.