VulnerabilityModified

CVE-2025-51088

Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/WifiGuestSet.

MEDIUM 5.3EPSS 8.63%

Does this matter?

Lower severity and a low EPSS score (8.63%). Track it; it rarely justifies an emergency change on its own.

Description

Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/WifiGuestSet. The manipulation of the argument `shareSpeed` leads to stack-based buffer overflow.

CVSS 3.1: 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS: 8.63% probability · 95th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Weakness: CWE-121
Affected: tenda/ac8 firmware
Source: cve@mitre.org

EPSS trend

EPSS moved from 8.6% on 25 October 2026 to 8.6% on 26 October 2026. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”.

References

https://github.com/TL-SN/IOT/blob/main/Tenda/Tenda-AC8v4%20%20V16.03.34.06/CVE-2025-51088.mdExploit, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.