HIGH🇵🇱 Wersja polska

CVE-2026-4252

CVSS 8.9v4.0pub. 2026-03-16upd. 2026-04-03

A vulnerability was identified in Tenda AC8 16.03.50.11. Affected by this issue is the function check_is_ipv6 of the component IPv6 Handler. The manipulation leads to reliance on ip address for authentication. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Tenda Ac8

    HW
    Tenda
    wszystkie wersje

  • Tenda Ac8 Firmware

    OS
    Tenda
    16.03.50.11
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2025-29100CRITICAL9.8PL ✓ten sam produkt

Buffer Overflow w Tenda AC8 — funkcja fromSetRouteStatic

CVE-2025-25668CRITICAL9.8PL ✓ten sam produkt

Tenda AC8V4 — stack overflow w parametrze shareSpeed (RCE)

CVE-2025-25664CRITICAL9.8PL ✓ten sam produkt

Tenda AC8V4 — stack overflow przez parametr shareSpeed (RCE)

CVE-2025-25663CRITICAL9.8PL ✓ten sam produkt

Tenda AC8V4 — stack-based buffer overflow w funkcji WifiExtraSet

CVE-2025-25667CRITICAL9.8PL ✓ten sam produkt

Buffer overflow w Tenda AC8V4 — stack overflow w funkcji get_parentControl_list_Info