Skip to main content
IMMUNITYSEC

CVE-2026-4253

Tenda AC8 Web UploadCfg route_set_user_policy_rule os command injection

5.8
MEDIUM
CVSS 2.0
EPSS 8.2% · 95th pctCWE-78CWE-77
2026-03-16

Description

A security flaw has been discovered in Tenda AC8 16.03.50.11. This affects the function route_set_user_policy_rule of the file /cgi-bin/UploadCfg of the component Web Interface. The manipulation of the argument wans.policy.list1 results in os command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.

Severity

CVSS 4.0 · CNA5.1 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
CVSS 3.1 · CNA4.7 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
CVSS 3.0 · CNA4.7 MEDIUM
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
CVSS 2.0 · CNA5.8 MEDIUM
AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR
SSVC · CISA-ADP
Exploitationpoc
Automatableno
Technical impactpartial

Affected Products

VendorProductAffected versions
TendaAC8
16.03.50.11

References

5 Links

Record Details

Published
2026-03-16
Last updated
2026-03-16
Assigner (CNA)
VulDB
Credited to
DigitalAndrew (VulDB User)

More from Tenda

CVE-2026-53395.8

Tenda G103 Setting gpon.lua action_set_net_settings command injection

CVE-2026-05816.5

Tenda AC1206 httpd BehaviorManager formBehaviorManager command injection

CVE-2026-82635.8

Tenda AC6 httpd WifiExtraSet fromSetWirelessRepeat os command injection

CVE-2026-82655.8

Tenda AC6 httpd getLogFile get_log_file os command injection

Related Tool Categories

Tool categories that test for or protect against this vulnerability class.

CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.