CVE-2026-8265

creationtimestamp| type| source ---|---|--- 2026-05-11 06:53:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlkotkxbam2v...

CVE-2026-8265

The CVE-2026-8265 issue affects Tenda AC6 firmware version 15.03.06.23. The vulnerable component is httpd, specifically the function get_log_file in /goform/getLogFile, where manipulating the wans.flag argument leads to an OS command injection. The vulnerability is exploitable remotely and exploi...