https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T12:50:38.705002+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-8263 CVE-2026-8263 — Tenda AC6 httpd WifiExtraSet fromSetWirelessRepeat os command injection 2026-09-29T12:50:38.722840+00:00

Affected: Tenda AC6

A security flaw has been discovered in Tenda AC6 15.03.06.49_multi_TDE01. Affected is the function fromSetWirelessRepeat of the file /goform/WifiExtraSet of the component httpd. Performing a manipulation of the argument mac/ssid results in os command injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.