CVE-2026-38064

CriticalCVSS 9.8

Published: 15/06/2026(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

36th percentile — higher than 36% of all known CVEs

Summary

Tenda 5G03 version 5.03.02.04 (version 1.0) is vulnerable to command injection in the action_dial_call function via the dialNumber parameter.

Risk Assessment

Exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the device, posing a serious security threat to the network.

Recommendation

It is recommended to update the device to the latest firmware version to mitigate this vulnerability.

Original NVD description (English source)

Tenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function action_dial_call via the dialNumber parameter.