The vulnerability identified as CVE-2026-38062 affects Tenda 5G03 V05.03.02.04 (Version 1.0). It is a command injection flaw in the function action_set_rat_mode, specifically through the ratMode parameter. This type of vulnerability can allow an attacker to execute arbitrary system commands on the device, potentially leading to unauthorized control or disruption. There is no CVSS score or detailed vendor advisory available, and no patch or mitigation details have been provided.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the affected device, potentially leading to unauthorized access, control, or disruption of device functionality. However, no known exploits in the wild have been reported, and the extent of impact depends on the attacker's ability to reach and manipulate the vulnerable parameter.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the device management interface to trusted users only and monitor for unusual activity related to the ratMode parameter.