A security vulnerability has been detected in Tenda CP3 27.5.57.101. (CVE-2026-86150)

CVE-2026-86150 is a vulnerability in Tenda CP3 27.5.57.101 involving an unknown function in custom-x/softap/hostapd where manipulation of the wpa_passphrase argument results in hard-coded credentials. This flaw allows remote attackers to potentially leverage these credentials. The vulnerability is classified under CWE-259 (Use of Hard-coded Password). The CVSS 3.1 base score is 4.1, indicating low severity, with attack vector network, low attack complexity, high privileges required, no user interaction, and a confidentiality impact limited to partial information disclosure. No patch or remediation information is currently available, and no known exploits in the wild have been reported.

The vulnerability allows remote attackers with high privileges to manipulate the wpa_passphrase argument, resulting in hard-coded credentials exposure. This could lead to partial confidentiality loss but does not impact integrity or availability. The low CVSS score reflects limited impact and exploit complexity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is available at this time. Monitor vendor communications for updates on remediation.