CVE-2026-38064 | Tenda 5G03 1.0/05.03.02.04 action_dial_call dialNumber command injection

June 16, 2026 Yanac

A vulnerability was found in Tenda 5G03 1.0/05.03.02.04. It has been declared as critical. The impacted element is the function action_dial_call. The manipulation of the argument dialNumber results in command injection.

This vulnerability is reported as CVE-2026-38064. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More