<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 10 Sep 2026 15:21:05 +0000</lastBuildDate>
    <item>
      <title>5bebb73a-c4d8-496b-988a-ebc507c39f51</title>
      <link>https://vulnerability.circl.lu/sighting/5bebb73a-c4d8-496b-988a-ebc507c39f51/export</link>
      <description>{"uuid": "5bebb73a-c4d8-496b-988a-ebc507c39f51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://gist.github.com/ichintu/1e00e905a67cfcaf4dc2abec5f9b5345", "content": "Two critical remote OS command injection vulnerabilities (CVE-2026-86151 and CVE-2026-86148) affect the Tenda CP3 router (firmware 27.5.57.101). Both flaws, rated 9.4/10, stem from improper input handling in the `Apis/system.c` file, specifically within the `sub_2F77E8` and `SystemAsh` functions. Disclosed in early September 2026, they allow remote attackers to execute arbitrary system commands.", "creation_timestamp": "2026-09-06T04:01:23.325740Z"}</description>
      <content:encoded>{"uuid": "5bebb73a-c4d8-496b-988a-ebc507c39f51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://gist.github.com/ichintu/1e00e905a67cfcaf4dc2abec5f9b5345", "content": "Two critical remote OS command injection vulnerabilities (CVE-2026-86151 and CVE-2026-86148) affect the Tenda CP3 router (firmware 27.5.57.101). Both flaws, rated 9.4/10, stem from improper input handling in the `Apis/system.c` file, specifically within the `sub_2F77E8` and `SystemAsh` functions. Disclosed in early September 2026, they allow remote attackers to execute arbitrary system commands.", "creation_timestamp": "2026-09-06T04:01:23.325740Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5bebb73a-c4d8-496b-988a-ebc507c39f51/export</guid>
      <pubDate>Sun, 06 Sep 2026 04:01:23 +0000</pubDate>
    </item>
    <item>
      <title>a7e3535f-9ec1-4a36-aeca-2a840812bc94</title>
      <link>https://vulnerability.circl.lu/sighting/a7e3535f-9ec1-4a36-aeca-2a840812bc94/export</link>
      <description>{"uuid": "a7e3535f-9ec1-4a36-aeca-2a840812bc94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mut2nwdol32y", "content": "Critical Router Flaw, Because Apparently Security Is Still Optional\nPANIC 78% | Lag 0.0h | CVE-2026-86151 is reported as a critical vulnerability in Tenda CP3 running 27.5.57.101, affecting t\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-06T03:32:48.440018Z"}</description>
      <content:encoded>{"uuid": "a7e3535f-9ec1-4a36-aeca-2a840812bc94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mut2nwdol32y", "content": "Critical Router Flaw, Because Apparently Security Is Still Optional\nPANIC 78% | Lag 0.0h | CVE-2026-86151 is reported as a critical vulnerability in Tenda CP3 running 27.5.57.101, affecting t\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-06T03:32:48.440018Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a7e3535f-9ec1-4a36-aeca-2a840812bc94/export</guid>
      <pubDate>Sun, 06 Sep 2026 03:32:48 +0000</pubDate>
    </item>
    <item>
      <title>71594aff-fdc8-4bd4-b5e2-a52c7e208d81</title>
      <link>https://vulnerability.circl.lu/sighting/71594aff-fdc8-4bd4-b5e2-a52c7e208d81/export</link>
      <description>{"uuid": "71594aff-fdc8-4bd4-b5e2-a52c7e208d81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3musvv4vxth2j", "content": "\ud83d\udea8 CVE-2026-86151 \u2014 CVSS 9.4 CRITICAL\n\nA vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub_2F77E8 of t...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86151\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-06T02:07:21.525235Z"}</description>
      <content:encoded>{"uuid": "71594aff-fdc8-4bd4-b5e2-a52c7e208d81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3musvv4vxth2j", "content": "\ud83d\udea8 CVE-2026-86151 \u2014 CVSS 9.4 CRITICAL\n\nA vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub_2F77E8 of t...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86151\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-06T02:07:21.525235Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/71594aff-fdc8-4bd4-b5e2-a52c7e208d81/export</guid>
      <pubDate>Sun, 06 Sep 2026 02:07:21 +0000</pubDate>
    </item>
    <item>
      <title>86563479-d455-4365-80d8-14fcdfcedb4c</title>
      <link>https://vulnerability.circl.lu/sighting/86563479-d455-4365-80d8-14fcdfcedb4c/export</link>
      <description>{"uuid": "86563479-d455-4365-80d8-14fcdfcedb4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bvj7u6uvyezu5", "content": "CVE-2026-86151 - Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection\nCVE ID : CVE-2026-86151\n \n Published : Sept. 6, 2026, 12:16 a.m. | 1\u00a0hour, 10\u00a0minutes ago\n \n Description : A vulnerability was detected in Tenda CP3 27.5.57.101. The affected e...", "creation_timestamp": "2026-09-06T01:30:22.836876Z"}</description>
      <content:encoded>{"uuid": "86563479-d455-4365-80d8-14fcdfcedb4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bvj7u6uvyezu5", "content": "CVE-2026-86151 - Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection\nCVE ID : CVE-2026-86151\n \n Published : Sept. 6, 2026, 12:16 a.m. | 1\u00a0hour, 10\u00a0minutes ago\n \n Description : A vulnerability was detected in Tenda CP3 27.5.57.101. The affected e...", "creation_timestamp": "2026-09-06T01:30:22.836876Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/86563479-d455-4365-80d8-14fcdfcedb4c/export</guid>
      <pubDate>Sun, 06 Sep 2026 01:30:22 +0000</pubDate>
    </item>
    <item>
      <title>9ece540a-21c3-40a4-bfd8-72d7df55d5a1</title>
      <link>https://vulnerability.circl.lu/sighting/9ece540a-21c3-40a4-bfd8-72d7df55d5a1/export</link>
      <description>{"uuid": "9ece540a-21c3-40a4-bfd8-72d7df55d5a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3musorm54z325", "content": "CVE-2026-86151 - cp3\nThe Tenda CP3 router\u2019s network configuration feature can be tricked into running system commands. An attacker who reaches the router over the network could execute arbitrary commands,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cp3 #tenda #CVE #infosec", "creation_timestamp": "2026-09-06T00:00:08.262990Z"}</description>
      <content:encoded>{"uuid": "9ece540a-21c3-40a4-bfd8-72d7df55d5a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3musorm54z325", "content": "CVE-2026-86151 - cp3\nThe Tenda CP3 router\u2019s network configuration feature can be tricked into running system commands. An attacker who reaches the router over the network could execute arbitrary commands,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cp3 #tenda #CVE #infosec", "creation_timestamp": "2026-09-06T00:00:08.262990Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9ece540a-21c3-40a4-bfd8-72d7df55d5a1/export</guid>
      <pubDate>Sun, 06 Sep 2026 00:00:08 +0000</pubDate>
    </item>
  </channel>
</rss>
