Vulnerability · Published Apr 30, 2026 · Assigned by VulDB
CVE-2026-7470Tenda 4G300 SafeMacFilter sub_427C3C stack-based overflow
High 8.8
In plain English
A high-severity stack buffer overflow in 4G300 from Tenda. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.5%top 55.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A flaw has been found in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. Affected is the function sub_427C3C of the file /goform/SafeMacFilter. This manipulation of the argument page causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Affected products (as reported)
Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
References
- VDB-360206 | Tenda 4G300 SafeMacFilter sub_427C3C stack-based overflow vdb-entry, technical-description
- VDB-360206 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #804269 | Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01 Stack-based Buffer Overflow third-party-advisory
- https://github.com/Axelioc/CVE/blob/main/Tenda/US_4G300/sub_427C3C/sub_427C3C.md broken-link, exploit
- https://www.tenda.com.cn/ product