CVE-2026-3044: Tenda AC8 Httpd Service UploadCfg webCgiGetUploadFile stack-based overflow
A vulnerability has been found in Tenda AC8 16.03.34.06. This affects the function webCgiGetUploadFile of the file /cgi-bin/UploadCfg of the component Httpd Service. The manipulation of the argument boundary leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3044?
CVE-2026-3044 has been rated as high severity due to its potential for remote code execution via stack-based buffer overflow.
How do I fix CVE-2026-3044?
To mitigate CVE-2026-3044, update to the latest firmware version for the Tenda AC8 that addresses this vulnerability.
What component is affected by CVE-2026-3044?
CVE-2026-3044 affects the Httpd Service component, specifically the webCgiGetUploadFile function in Tenda AC8 devices.
Can CVE-2026-3044 be exploited remotely?
Yes, CVE-2026-3044 can be exploited remotely, allowing attackers to gain unauthorized access to vulnerable devices.
What are the potential impacts of CVE-2026-3044?
The potential impacts of CVE-2026-3044 include system instability, unauthorized code execution, and potential compromise of sensitive data.