A vulnerability classified as critical was found in Tenda F453 1.0.0.3. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. The manipulation of the argument mac results in command injection.

This vulnerability is known as CVE-2026-4554. It is possible to launch the attack remotely. Furthermore, an exploit is available.