Beveiligingsadvies

CVE-2026-86148

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-05 21:45:09

Laatst bijgewerkt 2026-09-08 17:17:22

Toegewezen door VulDB

CVSS-score 9.4

Status PUBLISHED

Beschrijving

A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the file Apis/system.c of the component Kylin. The manipulation of the argument AlarmVoiceURL results in os command injection. It is possible to launch the attack remotely.

← Alle CVE's bekijken Bekijk op cve.org ↗