CVE-2025-61498

A buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows attackers to cause a Denial of Service (DoS) via supplying a crafted packet.

CVSS 3.1

7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-26)

CWE

CWE-121

Published

2025-10-30

Modified

2026-10-27

Record from

the NVD, synced 2026-10-27

Affected

• tenda:ac8_firmware

References

• https://github.com/sakshi-garg02/CVEs/tree/main/CVE-2025-61498

Check your stackJSON