CVE-2026-38061

Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actionsetvolume via the volume parameter...

CVE-2026-38060

Tenda 5G03 firmware version V05.03.02.04 (Version 1.0) is vulnerable to Command injection due to improper neutralization of special elements used in an OS command. The vulnerability exists in the action_unlock_sim() function through the pin parameter. Exploitation of this flaw could allow an atta...

CVE-2026-38061

Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actionsetvolume via the volume parameter...

CVE-2026-38061

The Tenda 5G03 (Version 1.0) running firmware V05.03.02.04 is vulnerable to a Command injection vulnerability. The flaw exists within the action_set_volume() function, specifically through the volume parameter. An attacker exploiting this could execute arbitrary commands on the system. No updated...

PT-2026-49295

Name of the Vulnerable Software and Affected Versions Tenda 5G03 version V05.03.02.04 Version 1.0 Description Command injection is possible in the action dial call function through the dialNumber parameter. Recommendations At the moment, there is no information about a newer version that contains...

PT-2026-49296

Name of the Vulnerable Software and Affected Versions Tenda 5G03 version V05.03.02.04 Version 1.0 Description Command injection is possible in the action ims on with apn function through the ims apn parameter. Recommendations At the moment, there is no information about a newer version that...

PT-2026-49292

Name of the Vulnerable Software and Affected Versions Tenda 5G03 version V05.03.02.04 Version 1.0 Description Command injection is possible in the action set volume function through the volume parameter. Recommendations At the moment, there is no information about a newer version that contains a...

CVE-2026-38062

Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actionsetratmode via the ratMode parameter...

CVE-2026-38063: Improper Neutralization of Special Elements used in an OS Command

Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actionradioonwithiaapn via the ia parameter...

CVE-2026-38060

Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actionunlocksim via the pin parameter...

CVE-2026-38060

Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actionunlocksim via the pin parameter...

CVE-2026-38064: Improper Neutralization of Special Elements used in an OS Command

Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actiondialcall via the dialNumber parameter...

CVE-2026-38063

Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actionradioonwithiaapn via the ia parameter...

CVE-2026-38061: Improper Neutralization of Special Elements used in an OS Command

Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actionsetvolume via the volume parameter...

Tenda W15E formPortalAuth function buffer overflow vulnerability

The Tenda W15E is a wireless router produced by the Chinese company Tenda. The Tenda W15E version 15.11.0.10 has a buffer overflow vulnerability. This vulnerability stems from the faulty handling of the gotoUrl parameter in the formPortalAuth function, which fails to properly validate the length ...

Tenda W15E formAddWebAuthUser function; webAuthUserInfo parameter buffer overflow vulnerability

Tenda W15E is a wireless router produced by the Chinese company Tenda. The Tenda W15E has a buffer overflow vulnerability in the webAuthUserInfo parameter of the formAddWebAuthUser function. Attackers can exploit this vulnerability by constructing specially crafted HTTP requests, resulting in a...

Tenda W15E formModifyWebAuthWhiteUser function has a buffer overflow vulnerability in the webAuthWhiteID parameter

The Tenda W15E is a wireless router produced by the Chinese company Tenda. The Tenda W15E has a buffer overflow vulnerability in the webAuthWhiteID function. An attacker can exploit this vulnerability to cause a denial-of-service attack...

Tenda W15E formAddWewifiWhiteUser function wewifiWhiteUserInfo parameter buffer overflow vulnerability

Tenda W15E is a wireless router produced by the Chinese company Tenda. The Tenda W15E has a buffer overflow vulnerability in the formAddWewifiWhiteUser function, specifically with the wewifiWhiteUserInfo parameter. Attackers can exploit this vulnerability to cause denial of service through...

Tenda W15E formAddWebAuthWhiteUser function: Buffer overflow vulnerability in the webAuthWhiteUserInfo parameter

Tenda W15E is a wireless router produced by the Chinese company Tenda. The Tenda W15E has a buffer overflow vulnerability in the webAuthWhiteUserInfo parameter. Attackers can exploit this vulnerability to cause denial-of-service attacks through specially crafted HTTP requests...

Tenda W15E formSetNetCheckTools function hostname parameter buffer overflow vulnerability

Tenda W15E is a wireless router produced by the Chinese company Tenda. The Tenda W15E has a buffer overflow vulnerability in the formSetNetCheckTools function’s hostname parameter. Attackers can exploit this vulnerability to cause a denial of service through carefully crafted HTTP requests...