PT-2026-25772 · Tenda · Ac8

Digitalandrew · Published 2026-03-16 · Updated 2026-03-16 · CVE-2026-4252

Mitre

CVSS v3.1

9.8

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A vulnerability was identified in Tenda AC8 16.03.50.11. Affected by this issue is the function check is ipv6 of the component IPv6 Handler. The manipulation leads to reliance on ip address for authentication. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

CWE-291

Related Identifiers

CVE-2026-4252

Affected Products

Ac8

References · 6

• 🔥 https://github.com/digitalandrew/tenda_ac8_v5/blob/main/poc_ipv6_auth_bypass.py · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4252 · Security Note
• https://tenda.com.cn · Note
• https://vuldb.com/?ctiid.351210 · Note
• https://vuldb.com/?id.351210 · Note
• https://vuldb.com/?submit.771759 · Note