Skip to content
OpenAdvisories

Product · Tenda

AC8

21 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.7
    CVE-2026-4253 Public exploit

    Tenda AC8 Web UploadCfg route_set_user_policy_rule os command injection

    A security flaw has been discovered in Tenda AC8 16.03.50.11. This affects the function route_set_user_policy_rule of the file /cgi-bin/UploadCfg of the component Web Interface. The manipulation of the argument wans.policy.list1 results in os command injectio…