CVE-2026-51380

CriticalCVSS 9.8

Published: 15/07/2026(UTC)Updated: 16/07/2026(UTC)Translated: 17/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

7th percentile - higher than 7% of all known CVEs

Summary

A buffer overflow vulnerability in Tenda AC10 v3 (firmware V03.03.16.09) allows attackers to cause a permanent Denial of Service (DoS) or potentially execute remote code via the /cgi-bin/UploadCfg endpoint.

Risk Assessment

The risk includes complete device unavailability (permanent DoS) or remote takeover by an attacker, potentially compromising network integrity and confidentiality.

Recommendation

Immediately update the Tenda AC10 v3 firmware to the latest version and restrict management interface access to trusted networks only.

Original NVD description (English source)

Buffer Overflow vulnerability in Tenda AC10 v3 (firmware V03.03.16.09) allows attackers to cause a permanent Denial of Service (DoS) or potentially execute remote code via the /cgi-bin/UploadCfg endpoint