CVE-2026-4252

A vulnerability was identified in Tenda AC8 16.03.50.11. Affected by this issue is the function check_is_ipv6 of the component IPv6 Handler. The manipulation leads to reliance on ip address for authentication. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

• CWE-287
• CWE-291

• https://github.com/digitalandrew/tenda_ac8_v5/blob/main/poc_ipv6_auth_bypass.pyExploit
• https://vuldb.com/?ctiid.351210Permissions Required, VDB Entry
• https://vuldb.com/?id.351210Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.771759Exploit, Third Party Advisory, VDB Entry
• https://www.tenda.com.cn/Product

Published

Mar 16, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-42514This vulnerability exists in e-Sushrut due to exposure of OT…8.8
• CVE-2026-42515This vulnerability exists in e-Sushrut due to improper acces…7.1
• CVE-2026-42516This vulnerability exists in e-Sushrut due to improper autho…7.1
• CVE-2026-42517This vulnerability exists in e-Sushrut due to the use of rev…7.1
• CVE-2026-42518This vulnerability exists in e-Sushrut due to disclosure of …8.7
• CVE-2026-42519A missing permission check in Jenkins Script Security Plugin…4.3
• CVE-2026-42520Jenkins Credentials Binding Plugin 719.v80e905ef14eb_ and ea…7.5
• CVE-2026-42521Jenkins Matrix Authorization Strategy Plugin 2.0-beta-1 thro…6.5
• CVE-2026-42522A missing permission check in Jenkins GitHub Branch Source P…4.3
• CVE-2026-42523Jenkins GitHub Plugin 1.46.0 and earlier improperly processe…9
• CVE-2026-42524Jenkins HTML Publisher Plugin 427 and earlier does not escap…8
• CVE-2026-42525Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.…4.3