Which versions of Tenda are affected by CVE-2026-4252?

A critical vulnerability in Tenda AC8 routers allows remote attackers to bypass authentication by spoofing IPv6 addresses, potentially giving unauthorized access to network infrastructure.

Is there a public PoC exploit available for CVE-2026-4252?

Yes, a public proof-of-concept exploit is available for CVE-2026-4252. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-4252?

Within 24 hours: Identify and inventory all Tenda AC8 16.03.50.11 devices in production and isolate them from critical network segments; disable remote management if enabled. Within 7 days: Implement network segmentation to restrict access to affected devices, enable logging/monitoring for suspicious IPv6 activity, and contact Tenda for patch timeline. Within 30 days: Plan device replacement or upgrade to patched firmware version as soon as available; consider deploying alternative router hardware if Tenda does not provide timely patching.

Tenda CVE-2026-4252

Q: What is the CVSS score of CVE-2026-4252?

CVE-2026-4252 has a CVSS 4.0 base score of 8.9 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-12470 HIGH

Reliance on IP Address for Authentication (CWE-291)

2026-03-16 VulDB

Tenda Information Disclosure

8.9

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

8.9 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

PoC Detected

Apr 03, 2026 - 19:39 vuln.today

Public exploit code

EUVD ID Assigned

Mar 16, 2026 - 17:19 euvd

EUVD-2026-12470

Analysis Generated

Mar 16, 2026 - 17:19 vuln.today

CVE Published

Mar 16, 2026 - 16:32 nvd

HIGH 8.9

DescriptionCVE.org

A vulnerability was identified in Tenda AC8 16.03.50.11. Affected by this issue is the function check_is_ipv6 of the component IPv6 Handler. The manipulation leads to reliance on ip address for authentication. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

AnalysisAI

A critical authentication bypass vulnerability exists in Tenda AC8 router firmware version 16.03.50.11 where the IPv6 handler function check_is_ipv6 relies on IP address for authentication, allowing remote attackers to gain unauthorized access. The vulnerability has a publicly available proof-of-concept exploit on GitHub and scores 9.8 CVSS, enabling complete compromise of the affected device with no authentication required. While not currently listed in CISA KEV, the combination of public exploit availability and ease of exploitation makes this a high-priority vulnerability for organizations using affected Tenda routers.

Technical ContextAI

The vulnerability affects the Tenda AC8 router firmware specifically in the IPv6 handling component, where the check_is_ipv6 function improperly relies on IP addresses for authentication decisions. According to the CPE identifier cpe:2.3:a:tenda:ac8:*:*:*:*:*:*:*:*, all versions of the AC8 firmware appear to be affected, though the specific vulnerable version confirmed is 16.03.50.11. The root cause is CWE-291 (Reliance on IP Address for Authentication), a fundamental security flaw where IP addresses are used as the sole factor for authentication, which can be easily spoofed or manipulated by attackers on the network.

RemediationAI

No official patch is currently available from Tenda for this vulnerability based on the provided references and the RL:W (workaround) indicator in the CVSS vector. Until a patch is released, organizations should implement network segmentation to isolate affected Tenda AC8 routers, disable IPv6 functionality if not required, implement strict firewall rules to limit remote access to the device management interface, and consider replacing the affected devices with alternatives that have proper authentication mechanisms. Monitor the vendor's security page at https://www.tenda.com.cn/ for future updates and patches.