AC
Product
AC8
62
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 33High 22Medium 7Low 0
Watch
Add AC8 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-4254 | 9.8 | Mar 16 | Tenda AC8 HTTP Endpoint SysToolChangePwd doSystemCmd stack-based overflow Affected: 16.03.50.0; 16.03.50.1; 16.03.50.2; 16.03.50.3; 16.03.50.4; 16.03.50.5; +6 more |
| CVE-2026-4252 | 9.8 | Mar 16 | Tenda AC8 IPv6 check_is_ipv6 ip address for authentication Affected: 16.03.50.11 |
| CVE-2025-12618 | 9.8 | Nov 3 | A vulnerability has been found in Tenda AC8 16.03.34.06 Affected: 16.03.34.06 |
| CVE-2025-4368 | 9.8 | May 6 | A vulnerability, which was classified as critical, was found in Tenda AC8 16.03.34.06 Affected: 16.03.34.06 |
| CVE-2025-29100 | 9.8 | Mar 24 | Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the fromSetRouteStatic function via the parameter list Affected: 16.03.34.06 |
| CVE-2025-1853 | 9.8 | Mar 3 | A vulnerability was found in Tenda AC8 16.03.34.06 and classified as critical Affected: 16.03.34.06 |
| CVE-2025-25668 | 9.8 | Feb 20 | Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub_47D878 function Affected: 16.03.34.06 |
| CVE-2025-25667 | 9.8 | Feb 20 | Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the urls parameter in the function get_parentControl_list_Info Affected: 16.03.34.06 |
| CVE-2025-25664 | 9.8 | Feb 20 | Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub_49E098 function Affected: 16.03.34.06 |
| CVE-2025-25663 | 9.8 | Feb 20 | A vulnerability was found in Tenda AC8V4 V16.03.34.06 Affected: 16.03.34.06 |
| CVE-2024-57703 | 9.8 | Jan 16 | Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability Affected: 16.03.34.06 |
| CVE-2024-11745 | 9.8 | Nov 26 | A vulnerability was found in Tenda AC8 16.03.34.09 and classified as critical Affected: 16.03.34.09 |
| CVE-2024-46652 | 9.8 | Sep 20 | Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability in the fromAdvSetMacMtuWan function Affected: 16.03.34.06 |
| CVE-2023-48194 | 9.8 | Jul 9 | Vulnerability in Tenda AC8v4 .V16.03.34.09 due to sscanf and the last digit of s8 being overwritten with \x0 Affected: 16.03.34.09 |
| CVE-2023-4744 | 9.8 | Sep 4 | A vulnerability was found in Tenda AC8 16.03.34.06_cn_TDC01 Affected: 16.03.34.06 |
| CVE-2023-40900 | 9.8 | Aug 24 | Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetNetControlList Affected: 16.03.34.06 |
| CVE-2023-40899 | 9.8 | Aug 24 | Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at /goform/setMacFilterCfg Affected: 16.03.34.06 |
| CVE-2023-40898 | 9.8 | Aug 24 | Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter timeZone at /goform/SetSysTimeCfg Affected: 16.03.34.06 |
| CVE-2023-40897 | 9.8 | Aug 24 | Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter mac at /goform/GetParentControlInfo Affected: 16.03.34.06 |
| CVE-2023-40896 | 9.8 | Aug 24 | Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind Affected: 16.03.34.06 |
| CVE-2023-40895 | 9.8 | Aug 24 | Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg Affected: 16.03.34.06 |
| CVE-2023-40894 | 9.8 | Aug 24 | Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetStaticRouteCfg Affected: 16.03.34.06 |
| CVE-2023-40893 | 9.8 | Aug 24 | Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet Affected: 16.03.34.06 |
| CVE-2023-40892 | 9.8 | Aug 24 | Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter schedStartTime and schedEndTime at /goform/openSchedWifi Affected: 16.03.34.06 |
| CVE-2023-40891 | 9.8 | Aug 24 | Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg Affected: 16.03.34.06 |
| CVE-2023-38937 | 9.8 | Aug 7 | Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06.42_multi and AC10… Affected: 16.03.34.06 |
| CVE-2023-38935 | 9.8 | Aug 7 | Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42_multi were discovered to contain a tack overflow via the… Affected: 16.03.34.06 |
| CVE-2023-38931 | 9.8 | Aug 7 | Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13… Affected: 16.03.34.06 |
| CVE-2023-33675 | 9.8 | Jun 2 | Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the get_parentControl_list_Info function Affected: 16.03.34.06 |
| CVE-2023-33673 | 9.8 | Jun 2 | Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function Affected: 16.03.34.06 |
| CVE-2023-33671 | 9.8 | Jun 2 | Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the deviceId parameter in the saveParentControlInfo function Affected: 16.03.34.06 |
| CVE-2023-33670 | 9.8 | Jun 2 | Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sub_4a79ec function Affected: 16.03.34.06 |
| CVE-2023-33669 | 9.8 | Jun 2 | Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the timeZone parameter in the sub_44db3c function Affected: 16.03.34.06 |
| CVE-2026-3044 | 8.8 | Feb 23 | Tenda AC8 Httpd Service UploadCfg webCgiGetUploadFile stack-based overflow Affected: 16.03.34.06 |
| CVE-2026-2203 | 8.8 | Feb 9 | Tenda AC8 Embedded Httpd Service fast_setting_wifi_set buffer overflow Affected: 16.03.33.05 |
| CVE-2026-2202 | 8.8 | Feb 9 | Tenda AC8 httpd WifiGuestSet fromSetWifiGusetBasic buffer overflow Affected: 16.03.33.05 |
| CVE-2025-5799 | 8.8 | Jun 6 | A vulnerability was found in Tenda AC8 16.03.34.09 Affected: 16.03.34.09 |
| CVE-2025-5798 | 8.8 | Jun 6 | A vulnerability was found in Tenda AC8 16.03.34.09 Affected: 16.03.34.09 |
| CVE-2024-57704 | 8.8 | Jan 16 | Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability Affected: 16.03.34.06 |
| CVE-2024-10130 | 8.8 | Oct 18 | A vulnerability classified as critical was found in Tenda AC8 16.03.34.06 Affected: 16.03.34.06 |
| CVE-2024-10123 | 8.8 | Oct 18 | A vulnerability was found in Tenda AC8 16.03.34.06 Affected: 16.03.34.06 |
| CVE-2024-4066 | 8.8 | Apr 23 | A vulnerability classified as critical has been found in Tenda AC8 16.03.34.09 Affected: 16.03.34.09 |
| CVE-2024-4065 | 8.8 | Apr 23 | A vulnerability was found in Tenda AC8 16.03.34.09 Affected: 16.03.34.09 |
| CVE-2024-4064 | 8.8 | Apr 23 | A vulnerability was found in Tenda AC8 16.03.34.09 Affected: 16.03.34.09 |
| CVE-2025-51087 | 8.6 | Jul 24 | Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/saveParentControlInfo Affected: 16.03.34.06 |
| CVE-2025-61498 | 7.5 | Oct 30 | A buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows attackers to cause a Denial of Service (DoS) via supplying a crafted packet Affected: 03.03.10.01 |
| CVE-2025-55852 | 7.5 | Sep 3 | Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function via the parameter security or security_5g Affected: 16.03.34.06 |
| CVE-2025-29101 | 7.5 | Mar 20 | Tenda AC8V4.0 V16.03.34.06 was discovered to contain a stack overflow via the deviceid parameter in the get_parentControl_list_Info function Affected: 16.03.34.06 |
| CVE-2024-10280 | 7.5 | Oct 23 | A vulnerability was found in Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500 and AC1206 up to 20241022 Affected: 16.03.34.06; 16.03.34.09 |
| CVE-2023-39786 | 7.5 | Aug 21 | Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sscanf function Affected: 16.03.34.06 |
