Vulnerability Description
A vulnerability was identified in Tenda AC8 16.03.50.11. Affected by this issue is the function check_is_ipv6 of the component IPv6 Handler. The manipulation leads to reliance on ip address for authentication. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tenda | Ac8 Firmware | 16.03.50.11 |
| Tenda | Ac8 | - |
Related Weaknesses (CWE)
References
- https://github.com/digitalandrew/tenda_ac8_v5/blob/main/poc_ipv6_auth_bypass.pyExploit
- https://vuldb.com/?ctiid.351210Permissions RequiredVDB Entry
- https://vuldb.com/?id.351210Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.771759ExploitThird Party AdvisoryVDB Entry
- https://www.tenda.com.cn/Product
FAQ
What is CVE-2026-4252?
CVE-2026-4252 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A vulnerability was identified in Tenda AC8 16.03.50.11. Affected by this issue is the function check_is_ipv6 of the component IPv6 Handler. The manipulation leads to reliance on ip address for authen...
How severe is CVE-2026-4252?
CVE-2026-4252 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-4252?
Check the references section above for vendor advisories and patch information. Affected products include: Tenda Ac8 Firmware, Tenda Ac8.