by Kastro
Paper/Archive/CVE-2026-86148

CVE-2026-86148

Tenda CP3 — Tenda CP3 Kylin system.c SystemAsh os command injection

EPSS 3%CVSS 9.4
critical.is priorityof 100
46
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 87.1.871 × 2017.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injection. It is possible to launch the attack remotely.

Affected

ProductAffectedFixed inSource
CP327.5.57.101–CNA

Scores by source

VulDB (CNA)9.4CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X
VulDB (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:R
VulDB (CNA)9.1CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:R
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

writeupvuldb.com/vuln/399271refvuldb.com/vuln/399271/ctiwriteupvuldb.com/cve/CVE-2026-86148writeupvuldb.com/submit/895348reftenda.com.cn