CVE-2025-51089: Tenda AC8 Firmware

Medium severity, CVSS 6.5. EPSS: 6.8% chance of exploitation in the next 30 days.

Tenda AC8V4 V16.03.34.06` was discovered to contain heap overflow at /goform/GetParentControlInfo.The manipulation of the argument `mac` leads to heap-based buffer overflow.

Affected products

• Tenda AC8 Firmware: version 16.03.34.06 only

Published 2025-07-24. Last modified 2026-07-05.