Is CVE-2026-16248 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-16248?

CVE-2026-16248 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-16248

Description

A vulnerability was found in Tenda AC10 16.03.10.09_multi_TDE01. This issue affects the function fromAdvSetLanip of the file /goform/AdvSetLanip of the component httpd/netctrl. The manipulation of the argument GetValue/SetValue results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used.