CVE-2026-86150 Tenda CP3 hostapd hard-coded credentials

A security vulnerability has been detected in Tenda CP3 27.5.57.101. Impacted is an unknown function of the file custom-x/softap/hostapd. Such manipulation of the argument wpapassphrase leads to hard-coded credentials. The attack can be launched remotely. The exploit has been disclosed publicly a...

CVE-2026-86150

Tenda CP3 (firmware 27.5.57.101) is affected by a hard-coded credentials vulnerability in the file custom-x/softap/hostapd . Manipulation of the wpa_passphrase argument results in fixed credentials, which can be exploited remotely . The CVSS 4.0 score is 5.1 (Medium) with high privileges required...

CVE-2026-86148

A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injection. It is possible to launch the attack remotely...

CVE-2026-86149

A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interfacename/host causes os command injection. The attack can be initiated remotely...

CVE-2026-86149

A remote OS command injection vulnerability exists in Tenda CP3 firmware version 27.5.57.101 , rooted in insufficient input handling of the interface_name/host argument within Net/NetCheckPing.cpp . Successful exploitation requires high privileges (per CVSS 3.1 and 4.0) and can lead to full compr...

CVE-2026-86149 Tenda CP3 NetCheckPing.cpp os command injection

A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interfacename/host causes os command injection. The attack can be initiated remotely...

CVE-2026-86148 Tenda CP3 Kylin system.c SystemAsh os command injection

A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injection. It is possible to launch the attack remotely...

CVE-2026-86148 Tenda CP3 Kylin system.c SystemAsh os command injection

A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injection. It is possible to launch the attack remotely...

CVE-2026-86148

CVE-2026-86148 affects Tenda CP3 firmware 27.5.57.101 , specifically the SystemAsh function in Apis/system.c within the Kylin component. An attacker can remotely manipulate the AlarmVoiceURL argument to achieve OS command injection . The CVSS 3.1 base score is 9.1 (Critical) , with high privilege...

CVE-2026-86150: Use of Hard-coded Credentials

A security vulnerability has been detected in Tenda CP3 27.5.57.101. Impacted is an unknown function of the file custom-x/softap/hostapd. Such manipulation of the argument wpapassphrase leads to hard-coded credentials. The attack can be launched remotely. The exploit has been disclosed publicly a...

PT-2026-86469

Name of the Vulnerable Software and Affected Versions Tenda HG10 affected versions not specified Description A buffer overflow exists in the Boa Web Server component within the formWanRedirect function of the /boaform/formWanRedirect endpoint. A remote attacker can trigger this issue by...

CVE-2026-86148: Improper Neutralization of Special Elements used in an OS Command

A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injection. It is possible to launch the attack remotely...

PT-2026-86457

🚨 CVE-2026-86148 A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injection. It is possible to launch the attack...

PT-2026-86459

🚨 CVE-2026-86150 A security vulnerability has been detected in Tenda CP3 27.5.57.101. Impacted is an unknown function of the file custom-x/softap/hostapd. Such manipulation of the argument wpa passphrase leads to hard-coded credentials. The attack can be launched remotely. The exploit has been...

PT-2026-86468

Name of the Vulnerable Software and Affected Versions Tenda HG10 affected versions not specified Description A remote buffer overflow exists in the formURL function within the /boaform/admin/formURL endpoint. This issue occurs when the Keywd/urlFQDN argument is manipulated, potentially allowing a...

PT-2026-86458

🚨 CVE-2026-86149 A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interface name/host causes os command injection. The attack can be initiated remotely. 🎖@cveNotify...

PT-2026-86460

A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub 2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection. The attack may be initiated remotely...

CVE-2026-86149: Improper Neutralization of Special Elements used in an OS Command

A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interfacename/host causes os command injection. The attack can be initiated remotely...

The vulnerability of the fromSetCmdlineRun() function in the Tenda A18 router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the fromSetCmdlineRun function in the Tenda A18 router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2026-85110

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of the file /boaform/formWlanSetup of the component Boa Web Server. The manipulation of the argument ssid leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly...