CVE-2026-5339

low-risk
Published 2026-04-02

A vulnerability was detected in Tenda G103 1.0.0.5. The impacted element is the function action_set_net_settings of the file gpon.lua of the component Setting Handler. Performing a manipulation of the argument authLoid/authLoidPassword/authPassword/authSerialNo/authType/oltType/usVlanId/usVlanPriority results in command injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.

Do I need to act?

-
0.18% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
4
CVSS 4.7/10 Medium
NETWORK / LOW complexity

Affected Products (1)

G103 Firmware

Affected Vendors

Tenda

References (12)

Exploit https://github.com/ZZ2266/.github.io/tree/main/Tenda%20G103/authLoid
Third Party Advisory https://vuldb.com/submit/781132
Third Party Advisory https://vuldb.com/submit/781133
Third Party Advisory https://vuldb.com/submit/781134
Third Party Advisory https://vuldb.com/submit/781135
Third Party Advisory https://vuldb.com/submit/781142
Third Party Advisory https://vuldb.com/submit/781143
Third Party Advisory https://vuldb.com/submit/781144
Third Party Advisory https://vuldb.com/submit/781145
Third Party Advisory https://vuldb.com/vuln/354670
Permissions Required https://vuldb.com/vuln/354670/cti
Product https://www.tenda.com.cn/
25
/ 100
low-risk
Severity 19/34 · Moderate
Exploitability 1/34 · Minimal
Exposure 5/34 · Minimal