CVE-2026-38062: Command Injection
Tenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function actionsetratmode via the ratMode parameter.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Tenda 5G03 V05.03.02.04 (Version 1.0)from your environment.If the device is not required or cannot be adequately isolated, remove or replace the affected Tenda 5G03 V05.03.02.04 (Version 1.0) device from the network.
- Compensating control
Until a vendor patch or fix is available, restrict access to the vulnerable device(s): block or limit management/WAN access via firewall or ACLs, restrict administrative access to trusted IPs, and isolate affected devices from untrusted networks.
- Operational
Identify and inventory all devices running Tenda 5G03 V05.03.02.04 (Version 1.0) on your network so affected assets are known.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-38062?
CVE-2026-38062 has a critical severity score of 9.8 according to the CVSS v3.1.
How do I fix CVE-2026-38062?
To mitigate CVE-2026-38062, update the Tenda 5G03 firmware to the latest version that addresses the command injection vulnerability.
What type of vulnerability is CVE-2026-38062?
CVE-2026-38062 is classified as a command injection vulnerability affecting Tenda 5G03 routers.
Which software is affected by CVE-2026-38062?
CVE-2026-38062 affects the Tenda 5G03 running firmware version 1.0, specifically version V05.03.02.04.
What are the potential impacts of CVE-2026-38062?
Exploitation of CVE-2026-38062 can lead to unauthorized command execution, allowing attackers to compromise the affected device.