{"id":"CVE-2026-5338","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-5338","generatedAt":"2026-10-28T07:03:54.042Z","title":"A security vulnerability has been detected in Tenda G103 1.0.0.5.","description":"A security vulnerability has been detected in Tenda G103 1.0.0.5. The affected element is the function action_set_system_settings of the file system.lua of the component Setting Handler. Such manipulation of the argument lanIp leads to command injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.","published":"2026-04-02T14:16:37.000Z","lastModified":"2026-10-26T21:10:00.000Z","status":"Analyzed","sourceIdentifier":"cna@vuldb.com","cvss":{"version":"4.0","score":2,"severity":"LOW","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-74","CWE-77"],"affected":["tenda/g103 firmware"],"epss":{"score":0.04783,"percentile":0.91879,"date":"2026-10-27","history":[{"date":"2026-09-24","score":0.08314,"percentile":0.94731},{"date":"2026-10-25","score":0.04783,"percentile":0.91863}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (4.78%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://github.com/ZZ2266/.github.io/tree/main/Tenda%20G103/action_set_system_settings","tags":["Exploit","Third Party Advisory"],"source":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/781131","tags":["Third Party Advisory","VDB Entry"],"source":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/354669","tags":["Third Party Advisory","VDB Entry"],"source":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/354669/cti","tags":["Permissions Required","VDB Entry"],"source":"cna@vuldb.com"},{"url":"https://www.tenda.com.cn/","tags":["Product"],"source":"cna@vuldb.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-5338","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}