9.1Crítica
CVE-2026-86151Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection
Descripción
A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub_2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection. The attack may be initiated remotely.
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Tenda | CP3 | 27.5.57.101 | |
| tenda | cp3 firmware | — |
Referencias y parches
- VDB-399274 | Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection vdb-entrytechnical-description
- VDB-399274 | CTI Indicators (IOB, IOC, TTP, IOA) signature
- CVE-2026-86151 | CVE Analysis and Report third-party-advisory
- Submit #895352 | Tenda CP3 V3.2 V27.5.57.101 OS Command Injection third-party-advisory
- https://www.tenda.com.cn/ product