{"schema_version":1,"title":"Tenda CP3 vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 14 vulnerabilities in Tenda CP3: 0 in the last 7 days and 14 in the last 90 days, 6 of them critical and 0 exploited in the wild. The most recent, CVE-2026-86153, was published on 6 September 2026.","url":"https://junglewise.ai/threats/technologies/cp3","json_url":"https://junglewise.ai/threats/technologies/cp3.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/cp3","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":0,"all_time":14,"critical":6,"exploited":0,"last_7_days":0,"last_30_days":6,"last_90_days":14,"last_365_days":14},"latest":[{"cve":"CVE-2026-86153","cvss":9.1,"epss":0.0072,"slug":"cve-2026-86153-tenda-cp3-privilege-escalation-in-redirect-server","title":"Tenda CP3 privilege escalation in redirect server","severity":"critical","exploited":false,"published_at":"2026-09-06T02:17:19.77+00:00","url":"https://junglewise.ai/threats/cve-2026-86153-tenda-cp3-privilege-escalation-in-redirect-server"},{"cve":"CVE-2026-86152","cvss":10,"epss":0.0288,"slug":"cve-2026-86152-tenda-cp3-os-command-injection-in-autoaddwifi","title":"Tenda CP3 OS command injection in AutoAddWifi","severity":"critical","exploited":false,"published_at":"2026-09-06T02:17:19.37+00:00","url":"https://junglewise.ai/threats/cve-2026-86152-tenda-cp3-os-command-injection-in-autoaddwifi"},{"cve":"CVE-2026-86151","cvss":9.1,"epss":0.0295,"slug":"cve-2026-86151-tenda-cp3-os-command-injection-in-network-configuration","title":"Tenda CP3 OS command injection in Network Configuration Management","severity":"critical","exploited":false,"published_at":"2026-09-06T00:16:55.773+00:00","url":"https://junglewise.ai/threats/cve-2026-86151-tenda-cp3-os-command-injection-in-network-configuration"},{"cve":"CVE-2026-86150","cvss":4.1,"epss":0.0038,"slug":"cve-2026-86150-tenda-cp3-hard-coded-credentials-in-hostapd-configuration","title":"Tenda CP3 hard-coded credentials in hostapd configuration","severity":"medium","exploited":false,"published_at":"2026-09-05T23:17:41.337+00:00","url":"https://junglewise.ai/threats/cve-2026-86150-tenda-cp3-hard-coded-credentials-in-hostapd-configuration"},{"cve":"CVE-2026-86149","cvss":9.1,"epss":0.0295,"slug":"cve-2026-86149-tenda-cp3-os-command-injection-via-interface-name-argument","title":"Tenda CP3 OS command injection via interface_name argument","severity":"critical","exploited":false,"published_at":"2026-09-05T22:17:18.943+00:00","url":"https://junglewise.ai/threats/cve-2026-86149-tenda-cp3-os-command-injection-via-interface-name-argument"},{"cve":"CVE-2026-86148","cvss":9.1,"epss":0.0295,"slug":"cve-2026-86148-tenda-cp3-os-command-injection-in-systemash","title":"Tenda CP3 OS command injection in SystemAsh","severity":"critical","exploited":false,"published_at":"2026-09-05T22:17:18.743+00:00","url":"https://junglewise.ai/threats/cve-2026-86148-tenda-cp3-os-command-injection-in-systemash"},{"cve":"CVE-2026-19749","cvss":3.7,"epss":0.0063,"slug":"cve-2026-19749-tenda-smart-cameras-rtsp-onvif-auth-bypass-in-default","title":"Tenda Smart Cameras RTSP/ONVIF auth bypass in default configuration","severity":"low","exploited":false,"published_at":"2026-08-13T21:17:46.557+00:00","url":"https://junglewise.ai/threats/cve-2026-19749-tenda-smart-cameras-rtsp-onvif-auth-bypass-in-default"},{"cve":"CVE-2026-19748","cvss":3.7,"epss":0.0049,"slug":"cve-2026-19748-tenda-smart-camera-predictable-session-authentication-bypass","title":"Tenda Smart Camera predictable session authentication bypass","severity":"low","exploited":false,"published_at":"2026-08-13T21:17:46.343+00:00","url":"https://junglewise.ai/threats/cve-2026-19748-tenda-smart-camera-predictable-session-authentication-bypass"},{"cve":"CVE-2026-19747","cvss":9.8,"epss":0.0306,"slug":"cve-2026-19747-tenda-smart-camera-command-injection-in-ate-module","title":"Tenda Smart Camera command injection in ATE Module","severity":"critical","exploited":false,"published_at":"2026-08-13T20:17:21.57+00:00","url":"https://junglewise.ai/threats/cve-2026-19747-tenda-smart-camera-command-injection-in-ate-module"},{"cve":"CVE-2026-51605","slug":"cve-2026-51605-tenda-cp3-stack-buffer-overflow-in-rtsp-service","title":"Tenda CP3 stack buffer overflow in RTSP service","severity":"info","exploited":false,"published_at":"2026-07-09T17:17:01.07+00:00","url":"https://junglewise.ai/threats/cve-2026-51605-tenda-cp3-stack-buffer-overflow-in-rtsp-service"},{"cve":"CVE-2026-51604","cvss":7.5,"slug":"cve-2026-51604-tenda-cp3-stack-overflow-in-rtsp-service","title":"Tenda CP3 stack overflow in RTSP service","severity":"info","exploited":false,"published_at":"2026-07-09T17:17:00.97+00:00","url":"https://junglewise.ai/threats/cve-2026-51604-tenda-cp3-stack-overflow-in-rtsp-service"},{"cve":"CVE-2026-51603","cvss":0,"slug":"cve-2026-51603-tenda-cp3-stack-buffer-overflow-in-rtsp-service","title":"Tenda CP3 stack buffer overflow in RTSP service","severity":"info","exploited":false,"published_at":"2026-07-09T17:17:00.867+00:00","url":"https://junglewise.ai/threats/cve-2026-51603-tenda-cp3-stack-buffer-overflow-in-rtsp-service"},{"cve":"CVE-2026-51602","slug":"cve-2026-51602-tenda-cp3-stack-overflow-in-rtsp-service","title":"Tenda CP3 stack overflow in RTSP service","severity":"info","exploited":false,"published_at":"2026-07-09T17:16:59.93+00:00","url":"https://junglewise.ai/threats/cve-2026-51602-tenda-cp3-stack-overflow-in-rtsp-service"},{"cve":"CVE-2026-51600","cvss":5.3,"slug":"cve-2026-51600-tenda-cp3-dos-via-improper-rtsp-content-length-validation","title":"Tenda CP3 DoS via improper RTSP Content-Length validation","severity":"info","exploited":false,"published_at":"2026-07-09T17:16:59.693+00:00","url":"https://junglewise.ai/threats/cve-2026-51600-tenda-cp3-dos-via-improper-rtsp-content-length-validation"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":5},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":1,"exploited":0,"vulnerabilities":3},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":5,"exploited":0,"vulnerabilities":6},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Tenda F451","slug":"f451","vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/f451"},{"name":"Tenda F451 Firmware","slug":"f451-firmware","vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/f451-firmware"},{"name":"Tenda W20E","slug":"w20e","vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/w20e"},{"name":"Tenda G0","slug":"g0","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/g0"},{"name":"Tenda W15E","slug":"w15e","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/w15e"},{"name":"Tenda HG10","slug":"hg10","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/hg10"},{"name":"Tenda W3 Wireless Router","slug":"w3-wireless-router","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/w3-wireless-router"},{"name":"Tenda CH22","slug":"ch22","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/ch22"},{"name":"Tenda CX12L","slug":"cx12l","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/cx12l"},{"name":"Tenda CX12L Firmware","slug":"cx12l-firmware","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/cx12l-firmware"},{"name":"Tenda 5G03","slug":"5g03","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/5g03"},{"name":"Tenda AC10","slug":"ac10","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/ac10"}],"technology":{"hub":true,"name":"Tenda CP3","slug":"cp3","vendor":{"name":"Tenda","slug":"tenda","url":"https://junglewise.ai/threats/vendors/tenda"},"aliases":[],"category":"firmware","homepage":"https://www.tendacn.com/product/CP3.html","description":"Firmware for the Tenda CP3 security camera.","url":"https://junglewise.ai/threats/technologies/cp3"},"most_severe":[{"cve":"CVE-2026-86152","cvss":10,"epss":0.0288,"slug":"cve-2026-86152-tenda-cp3-os-command-injection-in-autoaddwifi","title":"Tenda CP3 OS command injection in AutoAddWifi","severity":"critical","exploited":false,"published_at":"2026-09-06T02:17:19.37+00:00","url":"https://junglewise.ai/threats/cve-2026-86152-tenda-cp3-os-command-injection-in-autoaddwifi"},{"cve":"CVE-2026-19747","cvss":9.8,"epss":0.0306,"slug":"cve-2026-19747-tenda-smart-camera-command-injection-in-ate-module","title":"Tenda Smart Camera command injection in ATE Module","severity":"critical","exploited":false,"published_at":"2026-08-13T20:17:21.57+00:00","url":"https://junglewise.ai/threats/cve-2026-19747-tenda-smart-camera-command-injection-in-ate-module"},{"cve":"CVE-2026-86151","cvss":9.1,"epss":0.0295,"slug":"cve-2026-86151-tenda-cp3-os-command-injection-in-network-configuration","title":"Tenda CP3 OS command injection in Network Configuration Management","severity":"critical","exploited":false,"published_at":"2026-09-06T00:16:55.773+00:00","url":"https://junglewise.ai/threats/cve-2026-86151-tenda-cp3-os-command-injection-in-network-configuration"},{"cve":"CVE-2026-86149","cvss":9.1,"epss":0.0295,"slug":"cve-2026-86149-tenda-cp3-os-command-injection-via-interface-name-argument","title":"Tenda CP3 OS command injection via interface_name argument","severity":"critical","exploited":false,"published_at":"2026-09-05T22:17:18.943+00:00","url":"https://junglewise.ai/threats/cve-2026-86149-tenda-cp3-os-command-injection-via-interface-name-argument"},{"cve":"CVE-2026-86148","cvss":9.1,"epss":0.0295,"slug":"cve-2026-86148-tenda-cp3-os-command-injection-in-systemash","title":"Tenda CP3 OS command injection in SystemAsh","severity":"critical","exploited":false,"published_at":"2026-09-05T22:17:18.743+00:00","url":"https://junglewise.ai/threats/cve-2026-86148-tenda-cp3-os-command-injection-in-systemash"},{"cve":"CVE-2026-86153","cvss":9.1,"epss":0.0072,"slug":"cve-2026-86153-tenda-cp3-privilege-escalation-in-redirect-server","title":"Tenda CP3 privilege escalation in redirect server","severity":"critical","exploited":false,"published_at":"2026-09-06T02:17:19.77+00:00","url":"https://junglewise.ai/threats/cve-2026-86153-tenda-cp3-privilege-escalation-in-redirect-server"},{"cve":"CVE-2026-86150","cvss":4.1,"epss":0.0038,"slug":"cve-2026-86150-tenda-cp3-hard-coded-credentials-in-hostapd-configuration","title":"Tenda CP3 hard-coded credentials in hostapd configuration","severity":"medium","exploited":false,"published_at":"2026-09-05T23:17:41.337+00:00","url":"https://junglewise.ai/threats/cve-2026-86150-tenda-cp3-hard-coded-credentials-in-hostapd-configuration"},{"cve":"CVE-2026-19749","cvss":3.7,"epss":0.0063,"slug":"cve-2026-19749-tenda-smart-cameras-rtsp-onvif-auth-bypass-in-default","title":"Tenda Smart Cameras RTSP/ONVIF auth bypass in default configuration","severity":"low","exploited":false,"published_at":"2026-08-13T21:17:46.557+00:00","url":"https://junglewise.ai/threats/cve-2026-19749-tenda-smart-cameras-rtsp-onvif-auth-bypass-in-default"},{"cve":"CVE-2026-19748","cvss":3.7,"epss":0.0049,"slug":"cve-2026-19748-tenda-smart-camera-predictable-session-authentication-bypass","title":"Tenda Smart Camera predictable session authentication bypass","severity":"low","exploited":false,"published_at":"2026-08-13T21:17:46.343+00:00","url":"https://junglewise.ai/threats/cve-2026-19748-tenda-smart-camera-predictable-session-authentication-bypass"},{"cve":"CVE-2026-51604","cvss":7.5,"slug":"cve-2026-51604-tenda-cp3-stack-overflow-in-rtsp-service","title":"Tenda CP3 stack overflow in RTSP service","severity":"info","exploited":false,"published_at":"2026-07-09T17:17:00.97+00:00","url":"https://junglewise.ai/threats/cve-2026-51604-tenda-cp3-stack-overflow-in-rtsp-service"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}