CVE-2026-4253

MEDIUM

Tenda AC8 Web UploadCfg route_set_user_policy_rule os command injection

Title source: cna

Description

A security flaw has been discovered in Tenda AC8 16.03.50.11. This affects the function route_set_user_policy_rule of the file /cgi-bin/UploadCfg of the component Web Interface. The manipulation of the argument wans.policy.list1 results in os command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.

References (5)

Core 5

Core References

Vdb Entry, Technical Description vdb-entry technical-description

VDB-351211 | Tenda AC8 Web UploadCfg route_set_user_policy_rule os command injection

https://vuldb.com/?id.351211

Signature, Permissions Required signature permissions-required

VDB-351211 | CTI Indicators (IOB, IOC, TTP, IOA)

https://vuldb.com/?ctiid.351211

Third Party Advisory third-party-advisory

Submit #771771 | Tenda AC8 V5 V16.03.50.11 OS Command Injection

https://vuldb.com/?submit.771771

Exploit exploit

https://github.com/digitalandrew/tenda_ac8_v5/blob/main/poc_cmdi_config_upload.py

View Exploit ZIP pw:eip

Product product

https://www.tenda.com.cn/

Scores

CVSS v3 4.7

EPSS 0.0653

EPSS Percentile 92.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-77 CWE-78

Status published

Products (2)

Tenda/AC8 16.03.50.11

tenda/ac8_firmware 16.03.50.11

Published Mar 16, 2026

Tracked Since Mar 16, 2026