PT-2026-30385 · Tenda · 4G03 Pro

Corenode · Published 2026-04-04 · Updated 2026-04-04 · CVE-2026-5526

NVD

CVSS v2.0

7.5

High

AV:N/AC:L/Au:N/C:P/I:P/A:P

A security flaw has been discovered in Tenda 4G03 Pro up to 1.0/1.1/04.03.01.53/192.168.0.1. Affected by this vulnerability is an unknown functionality of the file /bin/httpd. The manipulation results in improper access controls. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.

Fix

Incorrect Privilege Assignment

Improper Access Control

Weakness Enumeration

CWE-266

CWE-284

Related Identifiers

CVE-2026-5526

Affected Products

4G03 Pro

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-5526 · Security Note
• https://vuldb.com/vuln/355279 · Note
• https://twitter.com/CVEnew/status/2040564483236778144 · Twitter Post
• https://vuldb.com/vuln/355279/cti · Note
• https://tenda.com.cn · Note
• https://vuldb.com/submit/782052 · Note
• https://twitter.com/infoflowcloud/status/2040565287968289212 · Twitter Post