ГлавнаяУязвимости → CVE-2026-3044
8.8высокая

CVE-2026-3044

Описание

A vulnerability has been found in Tenda AC8 16.03.34.06. This affects the function webCgiGetUploadFile of the file /cgi-bin/UploadCfg of the component Httpd Service. The manipulation of the argument boundary leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Затрагиваемое ПО
Tenda Ac8 firmwareTenda Ac8
CVSS
Балл8.8 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Источники
https://github.com/master-abc/cve/issues/43https://vuldb.com/?ctiid.347400https://vuldb.com/?id.347400https://vuldb.com/?submit.757240https://www.tenda.com.cn/