Dashboard / CVE-2026-5338

CVE-2026-5338

LOW
INFO Priority: 0.10 BB Relevance: 50/100
Published: 2026-04-02 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: High
UI: None
S: X
AT: None
VC: Low
VI: Low
VA: Low

Description

A security vulnerability has been detected in Tenda G103 1.0.0.5. The affected element is the function action_set_system_settings of the file system.lua of the component Setting Handler. Such manipulation of the argument lanIp leads to command injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
tenda g103_firmware 1.0.0.5

References & Advisories (5)

https://vuldb.com/submit/781131
Third Party Advisory VDB Entry
https://vuldb.com/vuln/354669
Third Party Advisory VDB Entry
https://vuldb.com/vuln/354669/cti
Permissions Required VDB Entry

Bug Bounty Relevance

50 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

2.0 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

4.78%
Raw Score 0.047830
Percentile 91.9%
Date 2026-10-29

EPSS Trend

2026-10-29
0.04783
2026-10-28
0.04783

Intelligence Sources

nvd ref →

External Links