Which versions of Tenda are affected by CVE-2026-5550?

CVE-2026-5550 is a high-severity stack buffer overflow in Tenda AC10 router firmware that allows authenticated users to execute arbitrary code and gain complete system control.

How to fix or mitigate CVE-2026-5550?

Within 24 hours: Inventory all Tenda AC10 routers in production and identify those running firmware version 16.03.10.10_multi_TDE01 or earlier. Within 7 days: Isolate affected routers from critical network segments and restrict administrative access to trusted personnel only; contact Tenda for patch availability and timeline. Within 30 days: Apply vendor-released patch immediately upon availability, or replace affected devices if no patch timeline is provided by vendor.

Tenda CVE-2026-5550

Q: What is the CVSS score of CVE-2026-5550?

CVE-2026-5550 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-19048 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-04-05 VulDB

GHSA-4p8f-q5hf-m6pr

Tenda Stack Overflow Buffer Overflow

8.7

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 29, 2026 - 23:52 vuln.today

cvss_changed

EUVD ID Assigned

Apr 05, 2026 - 08:15 euvd

EUVD-2026-19048

Analysis Generated

Apr 05, 2026 - 08:15 vuln.today

CVE Published

Apr 05, 2026 - 08:00 nvd

HIGH 8.7

DescriptionCVE.org

A vulnerability was identified in Tenda AC10 16.03.10.10_multi_TDE01. This affects the function fromSysToolChangePwd of the file /bin/httpd. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotely. Multiple endpoints might be affected.

AnalysisAI

Stack-based buffer overflow in Tenda AC10 router firmware version 16.03.10.10_multi_TDE01 allows authenticated remote attackers to achieve complete system compromise through the fromSysToolChangePwd function in /bin/httpd. The vulnerability requires only low-privilege authentication (CVSS PR:L) and has low attack complexity, enabling potential remote code execution with full confidentiality, integrity, and availability impact. No public exploit code identified at time of analysis, though detailed technical findings have been published on GitHub documenting multiple vulnerable endpoints.

Technical ContextAI

This vulnerability affects the Tenda AC10 wireless router's HTTP daemon (/bin/httpd), specifically within the system tools password change functionality (fromSysToolChangePwd). The root cause is CWE-121, a stack-based buffer overflow occurring when the application fails to properly validate input length before copying data to a fixed-size stack buffer. The CPE identifier (cpe:2.3:a:tenda:ac10:*:*:*:*:*:*:*:*) indicates this affects the Tenda AC10 product line. Stack-based buffer overflows in embedded device web interfaces are particularly dangerous because they can overwrite return addresses and function pointers on the stack, enabling arbitrary code execution with the privileges of the web server process-typically root on consumer routers. The GitHub reference indicates this is part of a broader security assessment that identified multiple vulnerable callers to a getvalue function, suggesting systemic input validation weaknesses across the firmware's web management interface.

RemediationAI

No vendor-released patch identified at time of analysis. Users should immediately check the official Tenda support website at https://www.tenda.com.cn/ for firmware updates addressing this vulnerability in the AC10 product line. Until a security patch is available, implement the following risk mitigation measures: disable remote management access to the router's web interface to eliminate internet-based attack surface, restrict administrative interface access to trusted local network segments only through firewall rules or VLAN segmentation, change default administrative credentials to strong unique passwords (minimum 16 characters with complexity), implement network monitoring to detect anomalous router management traffic, and consider replacing the device with alternative hardware if the vendor does not release timely security updates. Organizations using Tenda AC10 routers in production environments should prioritize replacement with enterprise-grade equipment that receives regular security maintenance. Monitor VulDB entry https://vuldb.com/vuln/355314 and the researcher's GitHub repository for updates on patch availability or additional technical details that may inform defense strategies.