CVE-2025-52054

An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The root password of the device is calculated with a static string and the last two octets of the MAC address of the device. This allows an unauthenticated attacker to authenticate with network services on the device.

• CWE-287

• https://www.virtualhackinglabs.com/advisories/cve-2025-52054-tenda-ac8-calculated-root-password/Exploit, Third Party Advisory

Published

Aug 28, 2025

Last Modified

Sep 26, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-52047In Frappe ErpNext v15.57.5, the function get_income_account(…6.5
• CVE-2025-52048In Frappe 15.x.x before 15.72.0 and 14.x.x before 14.96.10, …6.5
• CVE-2025-52049In Frappe ErpNext v15.57.5, the function get_timesheet_detai…6.5
• CVE-2025-5205A vulnerability classified as critical has been found in 100…9.8
• CVE-2025-52050In Frappe ERPNext 15.57.5, the function get_loyalty_program_…6.5
• CVE-2025-52053TOTOLINK X6000R V9.4.0cu.1360_B20241207 was found to contain…9.8
• CVE-2025-5206A vulnerability classified as critical was found in Pixelimi…9.8
• CVE-2025-5207A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-52074PHPGURUKUL Online Shopping Portal 2.1 is vulnerable to Cross…6.1
• CVE-2025-52078File upload vulnerability in Writebot AI Content Generator S…6.5
• CVE-2025-52079The administrator password setting of the D-Link DIR-820L 1.…8.8
• CVE-2025-5208A vulnerability, which was classified as critical, was found…9.8