CVE-2026-3732

CVE-2026-3732 details a high-severity stack-based buffer overflow vulnerability in Tenda F453 1.0.0.3, specifically within the strcpy function of the /goform/exeCommand file. This flaw allows for remote exploitation by manipulating the cmdinput argument, potentially leading to complete compromise of the affected device. With a CVSS score of 8.8 (HIGH), the vulnerability is easily exploitable over the network with low privileges and no user interaction, resulting in high impacts to confidentiality, integrity, and availability. While there is no known active exploitation in the wild, the exploit has been publicly disclosed, and community discussion indicates awareness and potential for future exploitation.