Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A weakness has been identified in Tenda AC6 15.03.06.23. Affected by this vulnerability is the function formWifiApScan of the file /goform/WifiApScan of the component httpd. Executing a manipulation of the argument wl2g.public.country/wl5g.public.country can lead to os command injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-8264 A weakness has been identified in Tenda AC6 15.03.06.23. Affected by this vulnerability is the function formWifiApScan of the file /goform/WifiApScan of the component h… https://www.cve.org/CVERecord?id=CVE-2026-8264
Post summary
The text announces a vulnerability in a Tenda AC6 device, describing the affected function, but provides no PoC, exploit detail, patch, or evidence of active exploitation.
CVE-2026-8264 OS Command Injection in Tenda AC6 15.03.06.23 WifiApScan Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8264
Post summary
The post announces CVE‑2026‑8264 as an OS Command Injection vulnerability affecting Tenda AC6's WifiApScan function, with no additional exploit or mitigation details provided.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | ac6 | 2.0 | - | - |
| OS | tenda | ac6_firmware | 15.03.06.23 | - | - |