CVE-2026-3729 | Tenda F453 1.0.0.3/3.As /goform/PPTPDClient fromPptpUserAdd username/opttype stack-based overflow

A vulnerability classified as critical was found in Tenda F453 1.0.0.3/3.As. Impacted is the function fromPptpUserAdd of the file /goform/PPTPDClient. Such manipulation of the argument username/opttype leads to stack-based buffer overflow.

This vulnerability is documented as CVE-2026-3729. The attack can be executed remotely. Additionally, an exploit exists.