CVE-2026-38065
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
Tenda 5G03 version V05.03.02.04 (version 1.0) is vulnerable to command injection in the action_ims_on_with_apn function via the ims_apn parameter.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized command execution on the device, posing a serious security threat to the network.
Recommendation
It is recommended to update the device firmware to the latest version to mitigate this vulnerability.
Other vulnerabilities in Tenda 5G03 V05.03.02.04 (Version 1.0)
See all- CVE-2026-38062Critical
Tenda 5G03 version V05.03.02.04 (version 1.0) is vulnerable to command injection in the action_set_rat_mode function via the ratMode parameter.
- CVE-2026-38061Critical
Tenda 5G03 version 5.03.02.04 (version 1.0) is vulnerable to command injection in the action_set_volume function via the volume parameter.
- CVE-2026-38060Critical
Tenda 5G03 version V05.03.02.04 (version 1.0) is vulnerable to command injection in the action_unlock_sim function via the pin parameter.
Original NVD description (English source)
Tenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function action_ims_on_with_apn via the ims_apn parameter.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS