CVE-2026-38063

Name of the Vulnerable Software and Affected Versions Tenda 5G03 version V05.03.02.04 (Version 1.0)

Description Command injection is possible in the action radio on with ia apn() function through the ia parameter. Command injection is a flaw that allows an attacker to execute arbitrary operating system commands on the target machine.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the action radio on with ia apn() function or avoid using the ia parameter.