CVE-2026-51380

Deferred Deferred - Pending Action

Buffer Overflow in Tenda AC10 v3 Firmware

Publication date: 2026-07-15

Last updated on: 2026-07-16

Assigner: MITRE

Description

Buffer Overflow vulnerability in Tenda AC10 v3 (firmware V03.03.16.09) allows attackers to cause a permanent Denial of Service (DoS) or potentially execute remote code via the /cgi-bin/UploadCfg endpoint

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-15

Last Modified

2026-07-16

Generated

2026-08-05

AI Q&A

2026-07-16

EPSS Evaluated

2026-08-03

NVD

CVE-2026-51380

Affected Vendors & Products

Vendor	Product	Version / Range
tenda	ac10	v03.03.16.09

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a Buffer Overflow in the Tenda AC10 v3 router firmware V03.03.16.09. It occurs via the /cgi-bin/UploadCfg endpoint, allowing attackers to cause a permanent Denial of Service (DoS) or potentially execute remote code.

Detection Guidance

Detecting this vulnerability requires checking for the presence of Tenda AC10 v3 devices with firmware V03.03.16.09 or earlier. Scan your network for devices running Tenda AC10 firmware and verify the version. Use commands like nmap to identify devices and check their firmware versions.

Impact Analysis

An attacker could exploit this to crash your router permanently, disrupting internet access. In severe cases, they might execute malicious code on your device, potentially gaining control or stealing data.

Compliance Impact

The provided CVE data does not specify direct impacts on compliance with standards like GDPR or HIPAA. However, a buffer overflow leading to remote code execution or DoS could potentially compromise data integrity, availability, or confidentiality, which are key concerns under GDPR and HIPAA.

Mitigation Strategies

Immediately update the firmware of Tenda AC10 v3 devices to the latest version. Disable access to the /cgi-bin/UploadCfg endpoint if possible. Isolate affected devices from critical network segments to limit exposure.

Hi! I’m here to help you understand CVE-2026-51380. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70