9.1Kritik
CVE-2026-86151Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection
Açıklama
A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub_2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection. The attack may be initiated remotely.
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Tenda | CP3 | 27.5.57.101 | |
| tenda | cp3 firmware | — |
Kaynaklar ve yamalar
- VDB-399274 | Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection vdb-entrytechnical-description
- VDB-399274 | CTI Indicators (IOB, IOC, TTP, IOA) signature
- CVE-2026-86151 | CVE Analysis and Report third-party-advisory
- Submit #895352 | Tenda CP3 V3.2 V27.5.57.101 OS Command Injection third-party-advisory
- https://www.tenda.com.cn/ product