CVE-2026-86151Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection

Beschreibung

A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub_2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection. The attack may be initiated remotely.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• VDB-399274 | Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection vdb-entrytechnical-description
• VDB-399274 | CTI Indicators (IOB, IOC, TTP, IOA) signaturepermissions-required
• CVE-2026-86151 | CVE Analysis and Report third-party-advisory
• Submit #895352 | Tenda CP3 V3.2 V27.5.57.101 OS Command Injection third-party-advisory
• https://www.tenda.com.cn/ product