100 matches found
CVE-2026-86152
A flaw has been found in Tenda CP3 27.5.57.101. The impacted element is the function CAutoAddWifi::ThreadProc of the file Functions/AutoAddWifi.cpp of the component Kylin. Executing a manipulation can lead to os command injection. The attack may be launched remotely...
CVE-2026-86153
A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of the file Functions/Redirect.cpp. The manipulation leads to improper privilege management. Remote exploitation of the attack is possible...
EUVD-2026-72038
A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of the file Functions/Redirect.cpp. The manipulation leads to improper privilege management. Remote exploitation of the attack is possible...
CVE-2026-86153 Tenda CP3 Redirect.cpp SetRedirectEnable privileges management
A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of the file Functions/Redirect.cpp. The manipulation leads to improper privilege management. Remote exploitation of the attack is possible...
CVE-2026-86153
Tenda CP3 (firmware 27.5.57.101 ) is affected by an improper privilege management vulnerability in the function CRedirServer::SetRedirectEnable within the file Functions/Redirect.cpp . The flaw allows remote exploitation over the network with low complexity , though it requires high privileges (p...
CVE-2026-86152 Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injection
A flaw has been found in Tenda CP3 27.5.57.101. The impacted element is the function CAutoAddWifi::ThreadProc of the file Functions/AutoAddWifi.cpp of the component Kylin. Executing a manipulation can lead to os command injection. The attack may be launched remotely...
EUVD-2026-72037
A flaw has been found in Tenda CP3 27.5.57.101. The impacted element is the function CAutoAddWifi::ThreadProc of the file Functions/AutoAddWifi.cpp of the component Kylin. Executing a manipulation can lead to os command injection. The attack may be launched remotely...
CVE-2026-86152
CVE-2026-86152 is a remotely exploitable OS command injection in Tenda CP3 (version 27.5.57.101). The vulnerable element is the function CAutoAddWifi::ThreadProc within the file Functions/AutoAddWifi.cpp , part of the Kylin component. An unauthenticated remote attacker can trigger the flaw with l...
EUVD-2026-72030
A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injection. It is possible to launch the attack remotely...
EUVD-2026-72032
A security vulnerability has been detected in Tenda CP3 27.5.57.101. Impacted is an unknown function of the file custom-x/softap/hostapd. Such manipulation of the argument wpapassphrase leads to hard-coded credentials. The attack can be launched remotely. The exploit has been disclosed publicly a...
EUVD-2026-72031
A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interfacename/host causes os command injection. The attack can be initiated remotely...
EUVD-2026-72036
A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection. The attack may be initiated remotely...
CVE-2026-86151
A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection. The attack may be initiated remotely...
PT-2026-86465
A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of the file Functions/Redirect.cpp. The manipulation leads to improper privilege management. Remote exploitation of the attack is possible...
PT-2026-86464
Name of the Vulnerable Software and Affected Versions Tenda CP3 version 27.5.57.101 Description A flaw in the Kylin component allows for remote OS command injection. The issue exists within the CAutoAddWifi::ThreadProc function located in the Functions/AutoAddWifi.cpp file. Recommendations At the...
CVE-2026-86151
CVE-2026-86151 affects Tenda CP3 firmware version 27.5.57.101 . The vulnerability is an OS command injection in the function sub_2F77E8 of the file Apis/system.c , within the Network Configuration Management component. The attack can be initiated remotely and requires high privileges (e.g., an au...
CVE-2026-86151 Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection
A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection. The attack may be initiated remotely...
CVE-2026-86150
A security vulnerability has been detected in Tenda CP3 27.5.57.101. Impacted is an unknown function of the file custom-x/softap/hostapd. Such manipulation of the argument wpapassphrase leads to hard-coded credentials. The attack can be launched remotely. The exploit has been disclosed publicly a...
CVE-2026-86150 Tenda CP3 hostapd hard-coded credentials
A security vulnerability has been detected in Tenda CP3 27.5.57.101. Impacted is an unknown function of the file custom-x/softap/hostapd. Such manipulation of the argument wpapassphrase leads to hard-coded credentials. The attack can be launched remotely. The exploit has been disclosed publicly a...
CVE-2026-86150
Tenda CP3 (firmware 27.5.57.101) is affected by a hard-coded credentials vulnerability in the file custom-x/softap/hostapd . Manipulation of the wpa_passphrase argument results in fixed credentials, which can be exploited remotely . The CVSS 4.0 score is 5.1 (Medium) with high privileges required...