Cp3 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:tenda:cp3_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Tenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42) |
|---|---|
| Product | Cp3 Firmware (e7024644-e013-5d75-83f1-6d317f1d41b0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-86153 |
vulnerable | 2026-09-16 04:32:58.909045 |
Tenda CP3 Redirect.cpp SetRedirectEnable privileges management
CRITICAL (9.1)
A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of the file Functions/Redirect.cpp. The manipulation leads to improper privilege management. Remote exploitation of the attack is possible.
Published: 2026-09-06T01:45:15.067Z
Updated: 2026-09-08T17:13:56.577Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86152 |
vulnerable | 2026-09-16 04:32:58.845194 |
Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injection
CRITICAL (10)
A flaw has been found in Tenda CP3 27.5.57.101. The impacted element is the function CAutoAddWifi::ThreadProc of the file Functions/AutoAddWifi.cpp of the component Kylin. Executing a manipulation can lead to os command injection. The attack may be launched remotely.
Published: 2026-09-06T01:30:10.981Z
Updated: 2026-09-10T18:06:27.153Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86150 |
vulnerable | 2026-09-16 04:32:58.711509 |
Tenda CP3 hostapd hard-coded credentials
MEDIUM (4.1)
A security vulnerability has been detected in Tenda CP3 27.5.57.101. Impacted is an unknown function of the file custom-x/softap/hostapd. Such manipulation of the argument wpa_passphrase leads to hard-coded credentials. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-09-05T23:00:12.424Z
Updated: 2026-09-08T13:23:49.631Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86148 |
vulnerable | 2026-09-16 04:32:58.697580 |
Tenda CP3 Kylin system.c SystemAsh os command injection
CRITICAL (9.1)
A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injection. It is possible to launch the attack remotely.
Published: 2026-09-05T21:45:09.573Z
Updated: 2026-09-08T17:17:22.377Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86151 |
vulnerable | 2026-09-16 04:32:58.514247 |
Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection
CRITICAL (9.1)
A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub_2F77E8 of the file Apis/system.c of the component Network Configuration Management. Performing a manipulation results in os command injection. The attack may be initiated remotely.
Published: 2026-09-05T23:45:09.354Z
Updated: 2026-09-11T20:37:13.261Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86149 |
vulnerable | 2026-09-16 04:32:58.464354 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23080 |
vulnerable | 2026-06-08 05:54:27.814351 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.