CVE-2026-4252 - Vulnerability Analysis

Overview

Tenda AC8 16.03.50.11 contains a broken authentication caused by reliance on IP address for authentication in the IPv6 Handler component, letting remote attackers bypass authentication, exploit requires no special conditions.

Severity & Score

Impact

Remote attackers can bypass authentication, potentially gaining unauthorized access to the device.

Mitigation

Update to the latest version.

References

• https://vuldb.com/?ctiid.351210
• https://vuldb.com/?id.351210
• https://vuldb.com/?submit.771759
• https://www.tenda.com.cn/
• https://github.com/digitalandrew/tenda_ac8_v5/blob/main/poc_ipv6_auth_bypass.py

Social Media Activity(1 post)

Offensive Sequence

@offseq

Mar 17, 2026

🚩 CRITICAL: CVE-2026-4252 impacts Tenda AC8 (16.03.50.11). IP-based auth in IPv6 Handler lets remote attackers bypass login. Exploit is public. Disable remote mgmt, restrict access, monitor traffic. Details: https://radar.offseq.com/threat/cve-2026-4252-reliance-on-ip-address-for-authentic-a9de4650 #OffSeq #CVE #RouterSecurity #Infosec

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner