CVE-2026-4565Disclosure(tenda / ac21)

LOWCVSS 7.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was detected in Tenda AC21 16.03.08.16. Impacted is the function formSetQosBand of the file /goform/SetNetControlList. Performing a manipulation of the argument list results in buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.

tenda CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-119CWE-120

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

ac21
ac21_firmware

Threat summary

7 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 5 classified signals
General: 1 classified signal
Peaked 1d ago at 5 mentions (2026-03-23); latest day: 1
7 total mentions across 3 days

Affected systems

Vendors

tenda

Products

ac21ac21_firmware

2 versions affected across 2 products

Deep dive

Activity timeline7 mentions / 3d

Signal classification3 categories

Disclosure

571.4%

Disclo

114.3%

General

114.3%

Referenced assets7 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-22	1	Disclosure1
2026-03-23	5	Disclo1Disclosure3General1
2026-03-24	1	Disclosure1

Full discourse7 posts

CVEarity@CVEarity198d
Disclosure
⚡ New CVE Alert: CVE-2026-4565 📊 Severity: 8.8 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-4565 #CVE-2026-4565 #CVE #High #CyberSecurity #InfoSec https://t.co/Gx0iY76vnq
Post summary
The tweet announces CVE-2026-4565, noting its high severity (8.8) and a risk level of high, but does not provide a PoC, exploit code, evidence of active exploitation, or patch information.
0000019
111 followersView on X
RedPacket Security@RedPacketSec199d
General
CVE Alert: CVE-2026-4565 - Tenda - AC21 - https://www.redpacketsecurity.com/cve-alert-cve-2026-4565-tenda-ac21/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-4565 #tenda #ac21
Post summary
A brief CVE alert tweet linking to an external page for CVE-2026-4565 on Tenda AC21; no PoC, exploit, patch, or detailed technical info is provided in the tweet.
0000046
3.6K followersView on X
CVE@CVEnew199d
Disclosure
CVE-2026-4565 A vulnerability was detected in Tenda AC21 16.03.08.16. Impacted is the function formSetQosBand of the file /goform/SetNetControlList. Performing a manipulation of the … https://www.cve.org/CVERecord?id=CVE-2026-4565
Post summary
A new vulnerability (CVE-2026-4565) has been identified in the Tenda AC21 firmware, specifically affecting the formSetQosBand function within /goform/SetNetControlList.
0000083
56.8K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash200d
Disclo
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-4565 - Tenda AC21 SetNetControlList formSetQosBand buffer overflow Intel Report: https://ift.tt/awN2o0H
Post summary
The alert highlights a buffer‑overflow vulnerability in Tenda AC21 (CVE-2026-4565) but offers no PoC, exploit code, or patch information.
0000027
289 followersView on X
CVEFind.com@CveFindCom200d
Disclosure
[CVE-2026-4565: HIGH] Critical vulnerability found in Tenda AC21 16.03.08.16 allows remote exploitation due to buffer overflow in formSetQosBand function. Attackers can manipulate arguments to trigger the expl...#cve,CVE-2026-4565,#cybersecurity https://cvefind.com/CVE-2026-4565
Post summary
The post announces CVE-2026-4565, a buffer‑overflow flaw in Tenda AC21 firmware that could lead to remote exploitation, but provides no PoC, exploit code, or patch information.
0000052
605 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds200d
Disclosure
CVE-2026-4565 Buffer Overflow in Tenda AC21 Router via Remote Network Control List Manipulation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4565
Post summary
The notice announces a buffer overflow vulnerability (CVE‑2026‑4565) in the Tenda AC21 router that permits remote manipulation of the network control list.
0000049
4.0K followersView on X
VulDB 🛡@vuldb200d
Disclosure
A new vulnerability with increased severity was disclosed for Tenda AC21 (CVE-2026-4565) https://vuldb.com/?id.352402
Post summary
A new vulnerability (CVE-2026-4565) affecting Tenda AC21 has been announced with higher severity, but the post lacks PoC, exploit details, or patch information.
0000077
2.1K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	tenda	ac21	1.0	-	-
OS	tenda	ac21_firmware	16.03.08.16	-	-

Explore more

Back to dashboard tenda CVEs ac21 vulnerabilities

What researchers are saying

CVE-2026-4565

CVEarity@CVEarityDisclosure

The tweet announces CVE-2026-4565, noting its high severity (8.8) and a risk level of high, but does not provide a PoC, exploit code, evidence of active exploitation, or patch information.

RedPacket Security@RedPacketSecGeneral

A brief CVE alert tweet linking to an external page for CVE-2026-4565 on Tenda AC21; no PoC, exploit, patch, or detailed technical info is provided in the tweet.

CVE@CVEnewDisclosure

A new vulnerability (CVE-2026-4565) has been identified in the Tenda AC21 firmware, specifically affecting the formSetQosBand function within /goform/SetNetControlList.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashDisclo

The alert highlights a buffer‑overflow vulnerability in Tenda AC21 (CVE-2026-4565) but offers no PoC, exploit code, or patch information.

CVEFind.com@CveFindComDisclosure

The post announces CVE-2026-4565, a buffer‑overflow flaw in Tenda AC21 firmware that could lead to remote exploitation, but provides no PoC, exploit code, or patch information.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The notice announces a buffer overflow vulnerability (CVE‑2026‑4565) in the Tenda AC21 router that permits remote manipulation of the network control list.

VulDB 🛡@vuldbDisclosure

A new vulnerability (CVE-2026-4565) affecting Tenda AC21 has been announced with higher severity, but the post lacks PoC, exploit details, or patch information.