CVE-2026-86151

A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub_2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection. The attack may be initiated remotely.

  • Published Sep 6, 2026
  • CVSS 9.4 critical
  • 2.9% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-86151 at the National Vulnerability Database