Approved changes feed: RSS · Atom

cpe:2.3:h:tenda:ac8:5.0:*:*:*:*:*:*:*

part: h version: 5.0 update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductAc8 (1c8b4a64-a848-553a-a598-6dae2d38ae7a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4254 not_vulnerable 2026-06-08 08:05:13.091243 Tenda AC8 HTTP Endpoint SysToolChangePwd doSystemCmd stack-based overflow
CRITICAL (9.8)
A weakness has been identified in Tenda AC8 up to 16.03.50.11. This vulnerability affects the function doSystemCmd of the file /goform/SysToolChangePwd of the component HTTP Endpoint. This manipulation of the argument local_2c causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-03-16T17:32:11.090Z
Updated: 2026-03-16T18:29:35.800Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4253 not_vulnerable 2026-06-08 08:05:13.090623 Tenda AC8 Web UploadCfg route_set_user_policy_rule os command injection
MEDIUM (4.7)
A security flaw has been discovered in Tenda AC8 16.03.50.11. This affects the function route_set_user_policy_rule of the file /cgi-bin/UploadCfg of the component Web Interface. The manipulation of the argument wans.policy.list1 results in os command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-03-16T17:02:11.100Z
Updated: 2026-03-16T18:01:14.327Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.