CP3
- Software type
- Operating system
- Total vulnerabilities (90 days)
- 9
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/07/2026, CP3 recorded 9 security vulnerabilities in the last 90 days, of which 6 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of CP3 and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-86153Tenda CP3 Redirect.cpp SetRedirectEnable privileges managementCVE-2026-86152Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injectionCVE-2026-86151Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injectionCVE-2026-86150Tenda CP3 hostapd hard-coded credentialsCVE-2026-86149Tenda CP3 NetCheckPing.cpp os command injection| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-86153Tenda CP3 Redirect.cpp SetRedirectEnable privileges management | Exploitation statusNot exploited | FixNo | Published09/06/2026 | SeverityCritical |
CVE-2026-86152Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injection | Exploitation statusNot exploited | FixNo | Published09/06/2026 | SeverityCritical |
CVE-2026-86151Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection | Exploitation statusActively exploited | FixNo | Published09/05/2026 | SeverityCritical |
CVE-2026-86150Tenda CP3 hostapd hard-coded credentials | Exploitation statusNot exploited | FixNo | Published09/05/2026 | SeverityMedium |
CVE-2026-86149Tenda CP3 NetCheckPing.cpp os command injection | Exploitation statusNot exploited | FixNo | Published09/05/2026 | SeverityCritical |
CVE-2026-86148Tenda CP3 Kylin system.c SystemAsh os command injection | Exploitation statusNot exploited | FixNo | Published09/05/2026 | SeverityCritical |
CVE-2026-19749Tenda CH7 RTSP/ONVIF missing authentication | Exploitation statusActively exploited | FixNo | Published08/13/2026 | SeverityMedium |
CVE-2026-19748Tenda CH7 Kylin Web Service CWebSessionManager_ParseSession entropy | Exploitation statusActively exploited | FixNo | Published08/13/2026 | SeverityMedium |
CVE-2026-19747Tenda CH7 ATE Module Kylin HandleCmd command injection | Exploitation statusActively exploited | FixNo | Published08/13/2026 | SeverityCritical |
CVE-2025-5763Tenda CP3 apollo sub_F3C8C command injection | Exploitation statusActively exploited | FixNo | Published06/06/2025 | SeverityMedium |
10 Results | Page 1 of 1