Lucene search
+L

67608 matches found

Cvelist
Cvelist
added 2026/09/06 1:30 a.m.43 views

CVE-2026-86152 Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injection

A flaw has been found in Tenda CP3 27.5.57.101. The impacted element is the function CAutoAddWifi::ThreadProc of the file Functions/AutoAddWifi.cpp of the component Kylin. Executing a manipulation can lead to os command injection. The attack may be launched remotely...

10CVSS0.01859EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/06 1:30 a.m.9 views

EUVD-2026-72037

A flaw has been found in Tenda CP3 27.5.57.101. The impacted element is the function CAutoAddWifi::ThreadProc of the file Functions/AutoAddWifi.cpp of the component Kylin. Executing a manipulation can lead to os command injection. The attack may be launched remotely...

10CVSS7.8AI score0.01859EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/06 1:30 a.m.32 views

CVE-2026-86152

CVE-2026-86152 is a remotely exploitable OS command injection in Tenda CP3 (version 27.5.57.101). The vulnerable element is the function CAutoAddWifi::ThreadProc within the file Functions/AutoAddWifi.cpp , part of the Kylin component. An unauthenticated remote attacker can trigger the flaw with l...

10CVSS7.8AI score0.01859EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/06 12:30 a.m.8 views

EUVD-2026-72030

A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injection. It is possible to launch the attack remotely...

9.4CVSS7.8AI score0.02465EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/06 12:30 a.m.7 views

EUVD-2026-72036

A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection. The attack may be initiated remotely...

9.4CVSS7.9AI score0.02043EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/06 12:30 a.m.8 views

EUVD-2026-72031

A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interfacename/host causes os command injection. The attack can be initiated remotely...

9.4CVSS7.9AI score0.02043EPSS
SaveExploits0References6
NVD
NVD
added 2026/09/06 12:16 a.m.6 views

CVE-2026-86151

A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection. The attack may be initiated remotely...

9.4CVSS0.02043EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/06 12:00 a.m.14 views

PT-2026-86478

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boaform/admin/formgponConf of the component Boa. The manipulation of the argument fmgpon loid leads to os command injection. Remote exploitation of the attack is possible. The exploit is...

9.9CVSS8AI score0.0163EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/09/06 12:00 a.m.14 views

PT-2026-86464

Name of the Vulnerable Software and Affected Versions Tenda CP3 version 27.5.57.101 Description A flaw in the Kylin component allows for remote OS command injection. The issue exists within the CAutoAddWifi::ThreadProc function located in the Functions/AutoAddWifi.cpp file. Recommendations At the...

10CVSS8.3AI score0.01859EPSS
SaveExploits0References11
Cvelist
Cvelist
added 2026/09/05 11:45 p.m.44 views

CVE-2026-86151 Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection

A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection. The attack may be initiated remotely...

9.4CVSS0.02043EPSS
SaveExploits0References5
NVD
NVD
added 2026/09/05 10:17 p.m.6 views

CVE-2026-86148

A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injection. It is possible to launch the attack remotely...

9.4CVSS0.02465EPSS
SaveExploits0References5
NVD
NVD
added 2026/09/05 10:17 p.m.6 views

CVE-2026-86149

A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interfacename/host causes os command injection. The attack can be initiated remotely...

9.4CVSS0.02043EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/05 10:00 p.m.39 views

CVE-2026-86149 Tenda CP3 NetCheckPing.cpp os command injection

A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interfacename/host causes os command injection. The attack can be initiated remotely...

9.4CVSS0.02043EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/05 10:00 p.m.30 views

CVE-2026-86149

A remote OS command injection vulnerability exists in Tenda CP3 firmware version 27.5.57.101 , rooted in insufficient input handling of the interface_name/host argument within Net/NetCheckPing.cpp . Successful exploitation requires high privileges (per CVSS 3.1 and 4.0) and can lead to full compr...

9.4CVSS7.9AI score0.02043EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/05 9:45 p.m.45 views

CVE-2026-86148

CVE-2026-86148 affects Tenda CP3 firmware 27.5.57.101 , specifically the SystemAsh function in Apis/system.c within the Kylin component. An attacker can remotely manipulate the AlarmVoiceURL argument to achieve OS command injection . The CVSS 3.1 base score is 9.1 (Critical) , with high privilege...

9.4CVSS7.8AI score0.02465EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/05 9:45 p.m.35 views

CVE-2026-86148 Tenda CP3 Kylin system.c SystemAsh os command injection

A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injection. It is possible to launch the attack remotely...

9.4CVSS0.02465EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/05 6:03 a.m.7 views

ROOT-OS-UBUNTU-2404-CVE-2025-71237 CVE-2025-71237 in linux - Patched by Root

Root has patched CVE-2025-71237 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

5.5CVSS5.9AI score0.00118EPSS
SaveExploits0
OSV
OSV
added 2026/09/05 6:03 a.m.10 views

ROOT-OS-UBUNTU-2404-CVE-2025-37876 CVE-2025-37876 in linux - Patched by Root

Root has patched CVE-2025-37876 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

5.5CVSS6.5AI score0.00251EPSS
SaveExploits0
OSV
OSV
added 2026/09/05 6:03 a.m.3 views

ROOT-OS-UBUNTU-2404-CVE-2023-54187 CVE-2023-54187 in linux - Patched by Root

Root has patched CVE-2023-54187 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

7.8CVSS6AI score0.0015EPSS
SaveExploits0
OSV
OSV
added 2026/09/05 6:03 a.m.8 views

ROOT-OS-UBUNTU-2404-CVE-2025-40116 CVE-2025-40116 in linux - Patched by Root

Root has patched CVE-2025-40116 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

5.9AI score0.0021EPSS
SaveExploits0
Rows per page
Query Builder