https://vulnerability.circl.lu/sightings/feed 2026-09-10T15:21:02.195207+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/5bebb73a-c4d8-496b-988a-ebc507c39f51/export 2026-09-10T15:21:02.218278+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5bebb73a-c4d8-496b-988a-ebc507c39f51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://gist.github.com/ichintu/1e00e905a67cfcaf4dc2abec5f9b5345", "content": "Two critical remote OS command injection vulnerabilities (CVE-2026-86151 and CVE-2026-86148) affect the Tenda CP3 router (firmware 27.5.57.101). Both flaws, rated 9.4/10, stem from improper input handling in the `Apis/system.c` file, specifically within the `sub_2F77E8` and `SystemAsh` functions. Disclosed in early September 2026, they allow remote attackers to execute arbitrary system commands.", "creation_timestamp": "2026-09-06T04:01:23.325740Z"} 2026-09-06T04:01:23.325740+00:00 https://vulnerability.circl.lu/sighting/a7e3535f-9ec1-4a36-aeca-2a840812bc94/export 2026-09-10T15:21:02.221065+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a7e3535f-9ec1-4a36-aeca-2a840812bc94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mut2nwdol32y", "content": "Critical Router Flaw, Because Apparently Security Is Still Optional\nPANIC 78% | Lag 0.0h | CVE-2026-86151 is reported as a critical vulnerability in Tenda CP3 running 27.5.57.101, affecting t\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-06T03:32:48.440018Z"} 2026-09-06T03:32:48.440018+00:00 https://vulnerability.circl.lu/sighting/71594aff-fdc8-4bd4-b5e2-a52c7e208d81/export 2026-09-10T15:21:02.221342+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "71594aff-fdc8-4bd4-b5e2-a52c7e208d81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3musvv4vxth2j", "content": "\ud83d\udea8 CVE-2026-86151 \u2014 CVSS 9.4 CRITICAL\n\nA vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub_2F77E8 of t...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86151\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-06T02:07:21.525235Z"} 2026-09-06T02:07:21.525235+00:00 https://vulnerability.circl.lu/sighting/86563479-d455-4365-80d8-14fcdfcedb4c/export 2026-09-10T15:21:02.221487+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "86563479-d455-4365-80d8-14fcdfcedb4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bvj7u6uvyezu5", "content": "CVE-2026-86151 - Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection\nCVE ID : CVE-2026-86151\n \n Published : Sept. 6, 2026, 12:16 a.m. | 1\u00a0hour, 10\u00a0minutes ago\n \n Description : A vulnerability was detected in Tenda CP3 27.5.57.101. The affected e...", "creation_timestamp": "2026-09-06T01:30:22.836876Z"} 2026-09-06T01:30:22.836876+00:00 https://vulnerability.circl.lu/sighting/9ece540a-21c3-40a4-bfd8-72d7df55d5a1/export 2026-09-10T15:21:02.221598+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9ece540a-21c3-40a4-bfd8-72d7df55d5a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3musorm54z325", "content": "CVE-2026-86151 - cp3\nThe Tenda CP3 router\u2019s network configuration feature can be tricked into running system commands. An attacker who reaches the router over the network could execute arbitrary commands,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cp3 #tenda #CVE #infosec", "creation_timestamp": "2026-09-06T00:00:08.262990Z"} 2026-09-06T00:00:08.262990+00:00