CVE-2026-38061

CriticalCVSS 9.8

Published: 15/06/2026(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

36th percentile — higher than 36% of all known CVEs

Tenda 5G03 version 5.03.02.04 (version 1.0) is vulnerable to command injection in the action_set_volume function via the volume parameter.

An attacker could exploit this vulnerability to execute arbitrary commands on the device, potentially leading to full control over it.

It is recommended to update the device firmware to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Tenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function action_set_volume via the volume parameter.