Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A weakness has been identified in Tenda AC8 up to 16.03.50.11. This vulnerability affects the function doSystemCmd of the file /goform/SysToolChangePwd of the component HTTP Endpoint. This manipulation of the argument local_2c causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Priority
MEDIUM
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
| Date | Total | Labels |
|---|
| 2026-03-16 | 5 | Disclosure2Exploit1Patch1PoC1 |
| 2026-03-17 | 2 | Disclosure2 |
🚨 CVE-2026-4254 — CVSS 9.8/10 ██████████ A weakness has been identified in Tenda AC8 up to 16.03.50.11. This vulnerability affects the function doSystemCmd of... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/qk7jHTjmEH
Post summary
A critical flaw (CVSS 9.8/10) in Tenda AC8 routers is acknowledged, with a patch available immediately.
CVE-2026-4254 Tenda AC8 Remote Stack Overflow Vulnerability in HTTP Endpoint Doシステムコマンド https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4254
Post summary
CVE-2026-4254 is a remote stack overflow vulnerability affecting the Tenda AC8 router’s HTTP endpoint.
CVE-2026-4254 A weakness has been identified in Tenda AC8 up to 16.03.50.11. This vulnerability affects the function doSystemCmd of the file /goform/SysToolChangePwd of the component… https://www.cve.org/CVERecord?id=CVE-2026-4254
Post summary
An identified weakness in Tenda AC8 up to version 16.03.50.11 affects the doSystemCmd function in the /goform/SysToolChangePwd component.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-4254 - Tenda AC8 HTTP Endpoint SysToolChangePwd doSystemCmd stack-based overflow Intel Report: https://ift.tt/r0F7Y8u
Post summary
The post announces a new CVE‑2026‑4254 stack‑based overflow vulnerability in Tenda AC8, but does not provide PoC code, exploitation details, or patch information.
[CVE-2026-4254: CRITICAL] Critical vulnerability identified in Tenda AC8 up to 16.03.50.11 allows remote stack-based buffer overflow via doSystemCmd function. Public exploit poses security risk.#cve,CVE-2026-4254,#cybersecurity https://cvefind.com/CVE-2026-4254
Post summary
CVE-2026-4254 is a critical stack-based buffer overflow in Tenda AC8 routers for which a public exploit exists, though no active exploitation or patch details are referenced.
🚨 CVE-2026-4254: Tenda AC8 HTTP E... Remote stack smash in Tenda's password change endpoint with public exploit - another IoT router begging for a shell #CVE20264254 #IoTpwn. https://zerodaysignal.com/vulnerability/CVE-2026-4254 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
CVE-2026-4254 is a remote stack‑smashing flaw in Tenda AC8 routers’ password change endpoint, with a public exploit available, but no patch or evidence of active exploitation.
A new vulnerability with increased severity was disclosed for Tenda AC8 (CVE-2026-4254) https://vuldb.com/?id.351212
Post summary
A newly disclosed vulnerability (CVE‑2026‑4254) with increased severity affecting the Tenda AC8 was announced, but no technical details, exploitation evidence, or patch information were included.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | ac8 | 5.0 | - | - |
| OS | tenda | ac8_firmware | - | - | - |