CVE-2026-4254

Tenda AC8 HTTP Endpoint SysToolChangePwd doSystemCmd stack-based overflow

State: Published
Severity: 9.3 Critical
Published: Mar 16, 2026
Updated: Mar 16, 2026
Reserved: Mar 16, 2026

Description

A weakness has been identified in Tenda AC8 up to 16.03.50.11. This vulnerability affects the function doSystemCmd of the file /goform/SysToolChangePwd of the component HTTP Endpoint. This manipulation of the argument local_2c causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.

Scores

CVSS	Score	Vector	Source
4.0	9.3 Critical	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P	VulDB
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R	VulDB
3.0	9.8 Critical	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R	VulDB
2.0	10.0 High	AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR	VulDB

Weaknesses

CWE-121 Stack-based Buffer Overflow
CWE-119 Memory Corruption

Affected Products

Product	Versions
AC8Tenda	16.03.50.0Affected 16.03.50.1Affected 16.03.50.2Affected 16.03.50.3Affected 16.03.50.4Affected 16.03.50.5Affected 16.03.50.6Affected 16.03.50.7Affected 16.03.50.8Affected 16.03.50.9Affected 16.03.50.10Affected 16.03.50.11Affected

References

VDB-351212 | Tenda AC8 HTTP Endpoint SysToolChangePwd doSystemCmd stack-based overflowvdb-entrytechnical-description
VDB-351212 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
Submit #771773 | Tenda AC8 V5 V16.03.50.11 Buffer Overflowthird-party-advisory
https://github.com/digitalandrew/tenda_ac8_v5/blob/main/CVE_Report_Tenda_AC8_SysToolChangePwd_BOF.mdexploit
https://www.tenda.com.cn/product

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.