CVE-2026-4252 — AI Deep Analysis Summary

🚨 **Essence**: Tenda AC8 routers have a critical flaw in the **IPv6 Handler**. The function `check_is_ipv6` incorrectly relies on IP addresses for authentication.…

🛡️ **Root Cause**: **CWE-291** (Authentication Bypass). The core flaw is in the logic of the `check_is_ipv6` function.…

📦 **Affected**: **Tenda AC8** Router. Specifically, firmware version **16.03.50.11**. 🌐 If you are running this specific build, you are vulnerable.

💀 **Attacker Capabilities**: With **CVSS 9.8 (Critical)**, attackers can achieve **High Confidentiality, Integrity, and Availability impact**. Essentially, full control over the router and potentially the local network.…

🔓 **Exploitation Threshold**: **LOW**. The vector is **Network (AV:N)**, **Low Complexity (AC:L)**, and requires **No Privileges (PR:N)** or **User Interaction (UI:N)**.…

💻 **Public Exploit**: **YES**. A Python PoC is available on GitHub (`tenda_ac8_v5`). This indicates **active exploitation potential** and easy availability for malicious actors. 🐍

🔍 **Self-Check**: Check your router's firmware version. If it is **16.03.50.11**, you are at risk. Use network scanners to detect Tenda AC8 devices and verify their firmware build number. 📡

🩹 **Official Fix**: The data references a **Third-Party Advisory** and vendor page, but does not explicitly confirm a released patch in this snippet. However, the existence of a VDB entry implies the vendor is aware.…

🛑 **Workaround**: If no patch is available, **disable IPv6** functionality if possible, or place the router behind a **WAF/IPS** that can filter malicious IPv6 authentication packets.…

🔥 **Urgency**: **CRITICAL**. With a CVSS score of **9.8** and public PoC, this is a **High Priority** issue. Immediate action is required to prevent unauthorized network access. 🚨