155 matches found
CVE-2026-86151 Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection
A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection. The attack may be initiated remotely...
CVE-2026-86151 Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection
A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection. The attack may be initiated remotely...
CVE-2026-86150
A security vulnerability has been detected in Tenda CP3 27.5.57.101. Impacted is an unknown function of the file custom-x/softap/hostapd. Such manipulation of the argument wpapassphrase leads to hard-coded credentials. The attack can be launched remotely. The exploit has been disclosed publicly a...
CVE-2026-86150 Tenda CP3 hostapd hard-coded credentials
A security vulnerability has been detected in Tenda CP3 27.5.57.101. Impacted is an unknown function of the file custom-x/softap/hostapd. Such manipulation of the argument wpapassphrase leads to hard-coded credentials. The attack can be launched remotely. The exploit has been disclosed publicly a...
CVE-2026-86150
Tenda CP3 (firmware 27.5.57.101) is affected by a hard-coded credentials vulnerability in the file custom-x/softap/hostapd . Manipulation of the wpa_passphrase argument results in fixed credentials, which can be exploited remotely . The CVSS 4.0 score is 5.1 (Medium) with high privileges required...
CVE-2026-86150 Tenda CP3 hostapd hard-coded credentials
A security vulnerability has been detected in Tenda CP3 27.5.57.101. Impacted is an unknown function of the file custom-x/softap/hostapd. Such manipulation of the argument wpapassphrase leads to hard-coded credentials. The attack can be launched remotely. The exploit has been disclosed publicly a...
CVE-2026-86148
A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injection. It is possible to launch the attack remotely...
CVE-2026-86149
A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interfacename/host causes os command injection. The attack can be initiated remotely...
CVE-2026-86149 Tenda CP3 NetCheckPing.cpp os command injection
A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interfacename/host causes os command injection. The attack can be initiated remotely...
CVE-2026-86149
A remote OS command injection vulnerability exists in Tenda CP3 firmware version 27.5.57.101 , rooted in insufficient input handling of the interface_name/host argument within Net/NetCheckPing.cpp . Successful exploitation requires high privileges (per CVSS 3.1 and 4.0) and can lead to full compr...
CVE-2026-86148
CVE-2026-86148 affects Tenda CP3 firmware 27.5.57.101 , specifically the SystemAsh function in Apis/system.c within the Kylin component. An attacker can remotely manipulate the AlarmVoiceURL argument to achieve OS command injection . The CVSS 3.1 base score is 9.1 (Critical) , with high privilege...
CVE-2026-86148 Tenda CP3 Kylin system.c SystemAsh os command injection
A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injection. It is possible to launch the attack remotely...
CVE-2026-86148 Tenda CP3 Kylin system.c SystemAsh os command injection
A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injection. It is possible to launch the attack remotely...
PT-2026-86460
A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub 2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection. The attack may be initiated remotely...
PT-2026-86458
šØ CVE-2026-86149 A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interface name/host causes os command injection. The attack can be initiated remotely. š@cveNotify...
PT-2026-86457
šØ CVE-2026-86148 A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injection. It is possible to launch the attack...
PT-2026-86459
šØ CVE-2026-86150 A security vulnerability has been detected in Tenda CP3 27.5.57.101. Impacted is an unknown function of the file custom-x/softap/hostapd. Such manipulation of the argument wpa passphrase leads to hard-coded credentials. The attack can be launched remotely. The exploit has been...
CVE-2026-86149: Improper Neutralization of Special Elements used in an OS Command
A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interfacename/host causes os command injection. The attack can be initiated remotely...
CVE-2026-86150: Use of Hard-coded Credentials
A security vulnerability has been detected in Tenda CP3 27.5.57.101. Impacted is an unknown function of the file custom-x/softap/hostapd. Such manipulation of the argument wpapassphrase leads to hard-coded credentials. The attack can be launched remotely. The exploit has been disclosed publicly a...
CVE-2026-86148: Improper Neutralization of Special Elements used in an OS Command
A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injection. It is possible to launch the attack remotely...