CVE-2026-86153: Tenda CP3, заобикаляне на вход и права

Описание

Оригинално описание

A vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirectEnable of the file Functions/Redirect.cpp. The manipulation leads to improper privilege management. Remote exploitation of the attack is possible.

Засегнати продукти

• Tenda CP3: 27.5.57.101

Вид слабост

• CWE-269 Неправилно управление на привилегии
• CWE-266 Неправилно задаване на привилегии

История

Други уязвимости в Tenda CP3

• 10.0CVE-2026-86152
• 9.4CVE-2026-86151
• 5.1CVE-2026-86150
• 9.4CVE-2026-86149
• 9.4CVE-2026-86148

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-86153
• https://nvd.nist.gov/vuln/detail/CVE-2026-86153
• https://vuldb.com/vuln/399276
• https://vuldb.com/vuln/399276/cti
• https://vuldb.com/cve/CVE-2026-86153
• https://vuldb.com/submit/895354
• https://www.tenda.com.cn/