CP3
Tenda- Software type
- —
- Catalog vulnerabilities
- 10
Severity across 10 analyzed records
Verify to analyze this security profile
A short verification protects source data and prevents automated AI requests.
en
Severity across 10 analyzed records
A short verification protects source data and prevents automated AI requests.
As of 09/11/2026, within CyStack's analyzed data, CP3 has 9 security vulnerabilities published in the last 90 days. Of these, 6 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of CP3 and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-86153Tenda CP3 Redirect.cpp SetRedirectEnable privileges management | Exploitation statusNot known exploited | FixNot confirmed | Published09/06/2026 | SeverityCritical |
CVE-2026-86152Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injection | Exploitation statusNot known exploited | FixNot confirmed | Published09/06/2026 | SeverityCritical |
CVE-2026-86151Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection | Exploitation statusNot confirmed | FixNot confirmed | Published09/05/2026 | SeverityCritical |
CVE-2026-86150Tenda CP3 hostapd hard-coded credentials | Exploitation statusNot known exploited | FixNot confirmed | Published09/05/2026 | SeverityMedium |
CVE-2026-86149Tenda CP3 NetCheckPing.cpp os command injection | Exploitation statusNot known exploited | FixNot confirmed | Published09/05/2026 | SeverityCritical |
CVE-2026-86148Tenda CP3 Kylin system.c SystemAsh os command injection | Exploitation statusNot known exploited | FixNot confirmed | Published09/05/2026 | SeverityCritical |
CVE-2026-19749Tenda CH7 RTSP/ONVIF missing authentication | Exploitation statusPublic exploit | FixNot confirmed | Published08/13/2026 | SeverityMedium |
CVE-2026-19748Tenda CH7 Kylin Web Service CWebSessionManager_ParseSession entropy | Exploitation statusPublic exploit | FixNot confirmed | Published08/13/2026 | SeverityMedium |
CVE-2026-19747Tenda CH7 ATE Module Kylin HandleCmd command injection | Exploitation statusPublic exploit | FixNot confirmed | Published08/13/2026 | SeverityCritical |
CVE-2025-5763Tenda CP3 apollo sub_F3C8C command injection | Exploitation statusPublic exploit | FixNot confirmed | Published06/06/2025 | SeverityMedium |