EUVD-2026-12488

A weakness has been identified in Tenda AC8 up to 16.03.50.11. This vulnerability affects the function doSystemCmd of the file /goform/SysToolChangePwd of the component HTTP Endpoint. This manipulation of the argument local2c causes stack-based buffer overflow. The attack can be initiated remotel...

PT-2026-25746

Name of the Vulnerable Software and Affected Versions Tenda AC8 versions through 16.03.50.11 Description A weakness exists in the Tenda AC8. This issue affects the doSystemCmd function within the /goform/SysToolChangePwd file of the HTTP Endpoint component. Manipulation of the local 2c argument...

CVE-2026-2202

A vulnerability was detected in Tenda AC8 16.03.33.05. Affected is the function fromSetWifiGusetBasic of the file /goform/WifiGuestSet of the component httpd. The manipulation of the argument shareSpeed results in buffer overflow. The attack may be launched remotely. The exploit is now public and...

The vulnerability of the save_virtualser_data() function in Tenda AC8 router software allows a hacker to induce a service failure.

The vulnerability of the savevirtualserdata function in Tenda AC8 router microprogramming software lies in the ability to write data beyond the buffer into memory during the processing of the list parameter. Exploiting this vulnerability could allow a remote attacker to cause service interruption...

The vulnerability of the fromSetRouteStatic() function in Tenda AC8 router software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromSetRouteStatic function in Tenda AC8 router software lies in the ability to write data beyond the buffer in memory during the processing of the list parameter. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service...

The vulnerability of the set_qosMib_list() function in Tenda AC8 router software allows a hacker to trigger a service failure.

The vulnerability of the setqosMiblist function in the Tenda AC8 router’s microprogramming software lies in the ability to write data beyond the buffer in memory during the processing of the list parameter. Exploiting this vulnerability could allow a malicious actor to cause service failure...

The vulnerability of the sscanf() function in Tenda AC8 router software allows a hacker to cause a service failure.

The vulnerability of the sscanf function in Tenda AC8 router microprogramming software relates to the possibility of writing beyond the buffer in memory when processing the time parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of Tenda AC8 router microprogramming software, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.

The vulnerability of Tenda AC8 microprogrammed routing software is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Tenda AC8 formSetServerConfig function buffer overflow vulnerability

Tenda AC8 is a dual gigabit wireless router from Tenda designed for fiber optic homes up to 1000 megabytes, supporting IPv6 protocol with intelligent network management. The Tenda AC8 suffers from a buffer overflow vulnerability that originates from the formSetServerConfig function in the...

The vulnerability of the `fromSetSysTime` function in the `/goform/SetSysTimeCfg` microprogramming system of Tenda AC8 routers, which allows a attacker to trigger a service failure.

The vulnerability of the fromSetSysTime function in the /goform/SetSysTimeCfg microprogramming system for Tenda AC8 routers is related to the issue where the operation’s output goes beyond the buffer in memory when processing the timeType parameter. Exploiting this vulnerability could allow an...

The vulnerability of the fromSetWirelessRepeat function in the /goform/WifiExtraSet file of the Tenda AC8 router microprogramming system, which allows a intruder to trigger a service failure.

The vulnerability of the fromSetWirelessRepeat function in the /goform/WifiExtraSet file of the Tenda AC8 router microprogramming system is related to the issue of operations going beyond the buffer boundaries in memory when processing the wpapskcrypto parameter. Exploiting this vulnerability cou...

The vulnerability of the sub_49E098 function in Tenda AC8 microprogrammed router software allows a attacker to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sub49E098 function in Tenda AC8 software lies in buffer overflows during the processing of the list parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Tenda AC8 安全漏洞

Shenzhen Jixiang Tengda Technology Co., Ltd AC8 is a wireless router. Shenzhen Jixiang Tengda Technology Co., Ltd AC8 has a buffer overflow vulnerability, the vulnerability stems from the SetRouteStatic function fails to correctly validate the length and size of the input data, an attacker can us...

The vulnerability of the get_parentControl_list_Info() function in the Tenda AC8 router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the getparentControllistInfo function in the Tenda AC8 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the urls parameter. Exploiting this vulnerability could allow a remote attacker to cause a servic...

The vulnerability of the formSetRebootTimer function (/goform/SetSysAutoRebbotCfg) in the Tenda AC8 router’s microprogramming system allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the compareparentcontroltime function /goform/saveParentControlInfo in the Tenda AC8 router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the `compare_parentcontrol_time` function (/goform/saveParentControlInfo) in the Tenda AC8 router’s microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the compareparentcontroltime function /goform/saveParentControlInfo in the Tenda AC8 router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the formSetRebootTimer function (/goform/SetRebootTimer) in the Tenda AC8 router’s microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetRebootTimer function /goform/SetRebootTimer in the Tenda AC8 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Tenda AC8 安全漏洞

Shenzhen Jixiang Tengda Technology Co., Ltd AC8 is a wireless router device that provides network connection and wireless management functions. A stack buffer overflow vulnerability exists in the R7WebsSecurityHandler function in the Shenzhen Jixiang Tengda Technology Co. AC8 /goform/execCommand...

PT-2023-27688

Name of the Vulnerable Software and Affected Versions Tenda AC8 version US AC8V4.0si V16.03.34.06 cn Description A stack overflow issue was discovered via the parameter list at the "/goform/SetStaticRouteCfg" API endpoint. This issue affects the Tenda AC8 router. Recommendations For Tenda AC8...

PT-2023-27690 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version US AC8V4.0si V16.03.34.06 cn Description: A stack overflow issue was discovered via the mac parameter at the "/goform/GetParentControlInfo" API endpoint. This issue affects the Tenda AC8 router. Recommendations: For Tenda AC...