Tag

Cve-2026-86152

1 brief RSS

Remote Command Injection Vulnerability in Tenda CP3

An unauthenticated remote command injection vulnerability in Tenda CP3 firmware version 27.5.57.101 allows attackers to execute arbitrary system commands via the AlarmVoiceURL argument.

CP3 remote-code-execution firmware-vulnerability iot network-appliance command-injection iot-vulnerability cve-2026-86152

2t 1c 5h ago