Exploit for Command Injection in Tenda Ac8_Firmware

🗓️ 25 Jun 2026 12:11:30Reported by renzi25031469Type

CVE-2026-42530 use-after-free in Nginx HTTP/3 may cause worker crash or remote code execution.

Reporter	Title	Published	Views	Family All 54
GithubExploit	Exploit for CVE-2026-42530	19 Jun 202601:04	–	githubexploit
GithubExploit	Exploit for CVE-2026-42530	19 Jun 202619:23	–	githubexploit
FreeBSD	nginx -- multiple vulnerabilities	17 Jun 202600:00	–	freebsd
BDU FSTEC	Vulnerability of the ngx_http_v3_module in NGINX HTTP servers; NGINX Open Source platform for application monitoring and management; NGINX Ingress Controller, NGINX Gateway Fabric server controller; NGINX Instance Manager automation platform. These tools allow attackers to circumvent security restrictions, execute arbitrary code, or cause service failures.	22 Jun 202600:00	–	bdu_fstec
Circl	CVE-2026-42530	17 Jun 202617:58	–	circl
CNNVD	Tenda AC8 操作系统命令注入漏洞	16 Mar 202600:00	–	cnnvd
CVE	CVE-2026-4253	16 Mar 202617:02	–	cve
CVE	CVE-2026-42530	17 Jun 202614:04	–	cve
Cvelist	CVE-2026-4253 Tenda AC8 Web UploadCfg route_set_user_policy_rule os command injection	16 Mar 202617:02	–	cvelist
Cvelist	CVE-2026-42530 NGINX Open-Source ngx_http_v3_module vulnerability	17 Jun 202614:04	–	cvelist

25 Jun 2026 12:19Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.17.2 - 8.1

CVSS 49.2

CVSS 25.8

CVSS 34.7

EPSS0.06532

SSVC