<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-12T05:21:15.324985+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1a45a11c-9d22-4ca3-b42f-87c13ff52025/export</id>
    <title>1a45a11c-9d22-4ca3-b42f-87c13ff52025</title>
    <updated>2026-09-12T05:21:15.349960+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1a45a11c-9d22-4ca3-b42f-87c13ff52025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86153", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mut4lvgspe24", "content": "\ud83d\udea8 CVE-2026-86153 \u2014 CVSS 9.4 CRITICAL\n\nA vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirec...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86153\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-06T04:07:27.565655Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1a45a11c-9d22-4ca3-b42f-87c13ff52025/export"/>
    <published>2026-09-06T04:07:27.565655+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/80b908fd-40c8-47ba-a6f4-9ffe13123dac/export</id>
    <title>80b908fd-40c8-47ba-a6f4-9ffe13123dac</title>
    <updated>2026-09-12T05:21:15.352692+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "80b908fd-40c8-47ba-a6f4-9ffe13123dac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86152", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mut4lmmapm24", "content": "\ud83d\udea8 CVE-2026-86152 \u2014 CVSS 10 CRITICAL\n\nA flaw has been found in Tenda CP3 27.5.57.101. The impacted element is the function CAutoAddWifi::ThreadPr...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86152\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-06T04:07:18.625109Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/80b908fd-40c8-47ba-a6f4-9ffe13123dac/export"/>
    <published>2026-09-06T04:07:18.625109+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5bebb73a-c4d8-496b-988a-ebc507c39f51/export</id>
    <title>5bebb73a-c4d8-496b-988a-ebc507c39f51</title>
    <updated>2026-09-12T05:21:15.352803+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5bebb73a-c4d8-496b-988a-ebc507c39f51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://gist.github.com/ichintu/1e00e905a67cfcaf4dc2abec5f9b5345", "content": "Two critical remote OS command injection vulnerabilities (CVE-2026-86151 and CVE-2026-86148) affect the Tenda CP3 router (firmware 27.5.57.101). Both flaws, rated 9.4/10, stem from improper input handling in the `Apis/system.c` file, specifically within the `sub_2F77E8` and `SystemAsh` functions. Disclosed in early September 2026, they allow remote attackers to execute arbitrary system commands.", "creation_timestamp": "2026-09-06T04:01:23.325740Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5bebb73a-c4d8-496b-988a-ebc507c39f51/export"/>
    <published>2026-09-06T04:01:23.325740+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a7e3535f-9ec1-4a36-aeca-2a840812bc94/export</id>
    <title>a7e3535f-9ec1-4a36-aeca-2a840812bc94</title>
    <updated>2026-09-12T05:21:15.352896+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a7e3535f-9ec1-4a36-aeca-2a840812bc94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mut2nwdol32y", "content": "Critical Router Flaw, Because Apparently Security Is Still Optional\nPANIC 78% | Lag 0.0h | CVE-2026-86151 is reported as a critical vulnerability in Tenda CP3 running 27.5.57.101, affecting t\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-06T03:32:48.440018Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a7e3535f-9ec1-4a36-aeca-2a840812bc94/export"/>
    <published>2026-09-06T03:32:48.440018+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6418c243-7f2d-4307-ae02-1422f19cf196/export</id>
    <title>6418c243-7f2d-4307-ae02-1422f19cf196</title>
    <updated>2026-09-12T05:21:15.352978+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6418c243-7f2d-4307-ae02-1422f19cf196", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86153", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3musytflyoq25", "content": "CVE-2026-86153\nThe Tenda CP3 router firmware contains a flaw in its redirect handling code that lets an attacker change the device\u2019s permission settings from outside the network. This could allow a remote user to take control\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-06T03:00:04.702474Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6418c243-7f2d-4307-ae02-1422f19cf196/export"/>
    <published>2026-09-06T03:00:04.702474+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/71594aff-fdc8-4bd4-b5e2-a52c7e208d81/export</id>
    <title>71594aff-fdc8-4bd4-b5e2-a52c7e208d81</title>
    <updated>2026-09-12T05:21:15.353067+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "71594aff-fdc8-4bd4-b5e2-a52c7e208d81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3musvv4vxth2j", "content": "\ud83d\udea8 CVE-2026-86151 \u2014 CVSS 9.4 CRITICAL\n\nA vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub_2F77E8 of t...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86151\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-06T02:07:21.525235Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/71594aff-fdc8-4bd4-b5e2-a52c7e208d81/export"/>
    <published>2026-09-06T02:07:21.525235+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f3d1070d-dc0a-461a-8e27-9469192d5a22/export</id>
    <title>f3d1070d-dc0a-461a-8e27-9469192d5a22</title>
    <updated>2026-09-12T05:21:15.353150+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f3d1070d-dc0a-461a-8e27-9469192d5a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86152", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3musvi52k6o2y", "content": "CVE-2026-86152 - cp3\nThe Tenda CP3 router (firmware version 27.5.57.101) has a flaw in its Wi\u2011Fi auto\u2011add function that allows an attacker to send specially crafted data and cause the device to execute operating\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cp3 #tenda #CVE #infosec", "creation_timestamp": "2026-09-06T02:00:05.789490Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f3d1070d-dc0a-461a-8e27-9469192d5a22/export"/>
    <published>2026-09-06T02:00:05.789490+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/86563479-d455-4365-80d8-14fcdfcedb4c/export</id>
    <title>86563479-d455-4365-80d8-14fcdfcedb4c</title>
    <updated>2026-09-12T05:21:15.353230+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "86563479-d455-4365-80d8-14fcdfcedb4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bvj7u6uvyezu5", "content": "CVE-2026-86151 - Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection\nCVE ID : CVE-2026-86151\n \n Published : Sept. 6, 2026, 12:16 a.m. | 1\u00a0hour, 10\u00a0minutes ago\n \n Description : A vulnerability was detected in Tenda CP3 27.5.57.101. The affected e...", "creation_timestamp": "2026-09-06T01:30:22.836876Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/86563479-d455-4365-80d8-14fcdfcedb4c/export"/>
    <published>2026-09-06T01:30:22.836876+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9ece540a-21c3-40a4-bfd8-72d7df55d5a1/export</id>
    <title>9ece540a-21c3-40a4-bfd8-72d7df55d5a1</title>
    <updated>2026-09-12T05:21:15.353313+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9ece540a-21c3-40a4-bfd8-72d7df55d5a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3musorm54z325", "content": "CVE-2026-86151 - cp3\nThe Tenda CP3 router\u2019s network configuration feature can be tricked into running system commands. An attacker who reaches the router over the network could execute arbitrary commands,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cp3 #tenda #CVE #infosec", "creation_timestamp": "2026-09-06T00:00:08.262990Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9ece540a-21c3-40a4-bfd8-72d7df55d5a1/export"/>
    <published>2026-09-06T00:00:08.262990+00:00</published>
  </entry>
</feed>
