{"vulnerability": "cve-2026-8615", "sightings": [{"uuid": "9ece540a-21c3-40a4-bfd8-72d7df55d5a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3musorm54z325", "content": "CVE-2026-86151 - cp3\nThe Tenda CP3 router\u2019s network configuration feature can be tricked into running system commands. An attacker who reaches the router over the network could execute arbitrary commands,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cp3 #tenda #CVE #infosec", "creation_timestamp": "2026-09-06T00:00:08.262990Z"}, {"uuid": "86563479-d455-4365-80d8-14fcdfcedb4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bvj7u6uvyezu5", "content": "CVE-2026-86151 - Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection\nCVE ID : CVE-2026-86151\n \n Published : Sept. 6, 2026, 12:16 a.m. | 1\u00a0hour, 10\u00a0minutes ago\n \n Description : A vulnerability was detected in Tenda CP3 27.5.57.101. The affected e...", "creation_timestamp": "2026-09-06T01:30:22.836876Z"}, {"uuid": "f3d1070d-dc0a-461a-8e27-9469192d5a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86152", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3musvi52k6o2y", "content": "CVE-2026-86152 - cp3\nThe Tenda CP3 router (firmware version 27.5.57.101) has a flaw in its Wi\u2011Fi auto\u2011add function that allows an attacker to send specially crafted data and cause the device to execute operating\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cp3 #tenda #CVE #infosec", "creation_timestamp": "2026-09-06T02:00:05.789490Z"}, {"uuid": "71594aff-fdc8-4bd4-b5e2-a52c7e208d81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3musvv4vxth2j", "content": "\ud83d\udea8 CVE-2026-86151 \u2014 CVSS 9.4 CRITICAL\n\nA vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub_2F77E8 of t...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86151\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-06T02:07:21.525235Z"}, {"uuid": "6418c243-7f2d-4307-ae02-1422f19cf196", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86153", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3musytflyoq25", "content": "CVE-2026-86153\nThe Tenda CP3 router firmware contains a flaw in its redirect handling code that lets an attacker change the device\u2019s permission settings from outside the network. This could allow a remote user to take control\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-06T03:00:04.702474Z"}, {"uuid": "a7e3535f-9ec1-4a36-aeca-2a840812bc94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mut2nwdol32y", "content": "Critical Router Flaw, Because Apparently Security Is Still Optional\nPANIC 78% | Lag 0.0h | CVE-2026-86151 is reported as a critical vulnerability in Tenda CP3 running 27.5.57.101, affecting t\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-06T03:32:48.440018Z"}, {"uuid": "5bebb73a-c4d8-496b-988a-ebc507c39f51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86151", "type": "seen", "source": "https://gist.github.com/ichintu/1e00e905a67cfcaf4dc2abec5f9b5345", "content": "Two critical remote OS command injection vulnerabilities (CVE-2026-86151 and CVE-2026-86148) affect the Tenda CP3 router (firmware 27.5.57.101). Both flaws, rated 9.4/10, stem from improper input handling in the `Apis/system.c` file, specifically within the `sub_2F77E8` and `SystemAsh` functions. Disclosed in early September 2026, they allow remote attackers to execute arbitrary system commands.", "creation_timestamp": "2026-09-06T04:01:23.325740Z"}, {"uuid": "80b908fd-40c8-47ba-a6f4-9ffe13123dac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86152", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mut4lmmapm24", "content": "\ud83d\udea8 CVE-2026-86152 \u2014 CVSS 10 CRITICAL\n\nA flaw has been found in Tenda CP3 27.5.57.101. The impacted element is the function CAutoAddWifi::ThreadPr...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86152\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-06T04:07:18.625109Z"}, {"uuid": "1a45a11c-9d22-4ca3-b42f-87c13ff52025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86153", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mut4lvgspe24", "content": "\ud83d\udea8 CVE-2026-86153 \u2014 CVSS 9.4 CRITICAL\n\nA vulnerability has been found in Tenda CP3 27.5.57.101. This affects the function CRedirServer::SetRedirec...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-86153\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-06T04:07:27.565655Z"}]}