HarborGuard / CVE
Back to search
HIGHCVE-2026-3044Published Modified CNA VulDB

CVE-2026-3044: Tenda AC8 Httpd Service UploadCfg webCgiGetUploadFile stack-based overflow

A vulnerability has been found in Tenda AC8 16.03.34.06. This affects the function webCgiGetUploadFile of the file /cgi-bin/UploadCfg of the component Httpd Service. The manipulation of the argument boundary leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS v4.0
8.7
Severity
HIGH
Fixed in
—
Affected Products
1
Affected packages
  • Tenda / AC8
    16.03.34.06
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
References