CVE-2025-8131

A vulnerability was found in Tenda AC20 16.03.08.05. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

• CWE-119
• CWE-121

• https://github.com/Thir0th/Thir0th-CVE/blob/main/Tenda_AC20_V16.03.08.05_has_a_stack_overflow.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.317527Permissions Required, VDB Entry
• https://vuldb.com/?id.317527Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.619769Third Party Advisory, VDB Entry
• https://www.tenda.com.cn/Product
• https://github.com/Thir0th/Thir0th-CVE/blob/main/Tenda_AC20_V16.03.08.05_has_a_stack_overflow.mdExploit, Third Party Advisory

Published

Jul 25, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-8125A vulnerability was found in deerwms deer-wms-2 up to 3.3. I…9.8
• CVE-2025-8126A vulnerability classified as critical has been found in dee…8.8
• CVE-2025-8127A vulnerability classified as critical was found in deerwms …8.8
• CVE-2025-8128A vulnerability, which was classified as critical, has been …6.3
• CVE-2025-8129A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2025-8130Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2025-8132A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.…5.4
• CVE-2025-8133A vulnerability classified as critical has been found in yan…6.3
• CVE-2025-8134A vulnerability classified as critical was found in PHPGuruk…8.8
• CVE-2025-8135A vulnerability, which was classified as critical, has been …8.8
• CVE-2025-8136A vulnerability, which was classified as critical, was found…7.5
• CVE-2025-8137A vulnerability has been found in TOTOLINK A702R 4.0.0-B2023…8.8