Is CVE-2026-86149 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-86149?

CVE-2026-86149 has a CVSS v3 severity of CRITICAL (9.1).

Back

CVE-2026-86149

Description

A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetCheckPing.cpp. This manipulation of the argument interface_name/host causes os command injection. The attack can be initiated remotely.