CRITICAL 9.4 NVD
CVE-2026-86149
A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the a
A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interface_name/host causes os command injection. The attack can be initiated remotely.
References
- https://vuldb.com/cve/CVE-2026-86149
- https://vuldb.com/submit/895350
- https://vuldb.com/vuln/399272
- https://vuldb.com/vuln/399272/cti
- https://www.tenda.com.cn/
This critical severity vulnerability with a CVSS score of 9.4 was published on 2026-09-05 via NVD.
Risk Timeline
CVE Disclosed2026-09-05 · 0 days ago
Remediation Resources
Official Advisory
vuldb.com/cve/CVE-2026-86149Official Advisory
vuldb.com/vuln/399272Analysis & PoC
vuldb.com/submit/895350Analysis & PoC
www.tenda.com.cn/
vulnfeed aggregates 10228 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.