CVE-2026-86151

CRITICAL

A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub_2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection. The attack may be initiated remotely.

CVSS v3.1 Score

9.1
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack Vector
NETWORK
Complexity
LOW
Privileges
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Published: 9/6/2026Modified: 9/6/2026

Related Intelligence (1)

CRITICALVulnerability

NVD CRITICAL: CVE-2026-86151 — A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is t...

A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub_2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection. The attack may be initiated remotely.

CVE-2026-86151
NIST NVD

References (5)

https://vuldb.com/cve/CVE-2026-86151https://vuldb.com/submit/895352https://vuldb.com/vuln/399274https://vuldb.com/vuln/399274/ctihttps://www.tenda.com.cn/