CRITICAL 9.4 NVD
CVE-2026-86151
A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub_2F77E8 of the file Apis/system.c of the component Network Config
A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub_2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection. The attack may be initiated remotely.
References
- https://vuldb.com/cve/CVE-2026-86151
- https://vuldb.com/submit/895352
- https://vuldb.com/vuln/399274
- https://vuldb.com/vuln/399274/cti
- https://www.tenda.com.cn/
This critical severity vulnerability with a CVSS score of 9.4 was published on 2026-09-06 via NVD.
Risk Timeline
CVE Disclosed2026-09-06 · -1 days ago
Remediation Resources
Official Advisory
vuldb.com/cve/CVE-2026-86151Official Advisory
vuldb.com/vuln/399274Analysis & PoC
vuldb.com/submit/895352Analysis & PoC
www.tenda.com.cn/
vulnfeed aggregates 10228 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.