CRITICAL 10.0 NVD
CVE-2026-86152
A flaw has been found in Tenda CP3 27.5.57.101. The impacted element is the function CAutoAddWifi::ThreadProc of the file Functions/AutoAddWifi.cpp of the compo
A flaw has been found in Tenda CP3 27.5.57.101. The impacted element is the function CAutoAddWifi::ThreadProc of the file Functions/AutoAddWifi.cpp of the component Kylin. Executing a manipulation can lead to os command injection. The attack may be launched remotely.
References
- https://vuldb.com/cve/CVE-2026-86152
- https://vuldb.com/submit/895353
- https://vuldb.com/vuln/399275
- https://vuldb.com/vuln/399275/cti
- https://www.tenda.com.cn/
This critical severity vulnerability with a CVSS score of 10.0 was published on 2026-09-06 via NVD.
Risk Timeline
CVE Disclosed2026-09-06 · -1 days ago
Remediation Resources
Official Advisory
vuldb.com/cve/CVE-2026-86152Official Advisory
vuldb.com/vuln/399275Analysis & PoC
vuldb.com/submit/895353Analysis & PoC
www.tenda.com.cn/
vulnfeed aggregates 10228 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.