Tenda AC6 operating system command injection vulnerability (CNVD-2026-38718)

The Tenda AC6 is a dual-band gigabit wireless router launched by Tenda. The Tenda AC6 has a vulnerability related to operating system command injection. This vulnerability stems from the formWifiApScan function in the httpd component’s/goform/WifiApScan file, which fails to properly validate the...

CVE-2026-8264

A weakness has been identified in Tenda AC6 15.03.06.23. Affected by this vulnerability is the function formWifiApScan of the file /goform/WifiApScan of the component httpd. Executing a manipulation of the argument wl2g.public.country/wl5g.public.country can lead to os command injection. It is...

CVE-2026-8264: Improper Neutralization of Special Elements used in an OS Command

A weakness has been identified in Tenda AC6 15.03.06.23. Affected by this vulnerability is the function formWifiApScan of the file /goform/WifiApScan of the component httpd. Executing a manipulation of the argument wl2g.public.country/wl5g.public.country can lead to os command injection. It is...