Tenda 4g03 Pro Firmware vulnerabilities

2 CVEs affecting Tenda 4g03 Pro Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-5527, published 2026-04-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-5526, published 2026-04-04. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A security flaw has been discovered in Tenda 4G03 Pro up to 1.0/1.1/04.03.01.53/192.168.0.1. Affected by this vulnerability is an unknown functionality of the file /bin/httpd. The manipulation…
CVE-2026-5527, published 2026-04-05. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. A weakness has been identified in Tenda 4G03 Pro 1.0/1.0re/01.bin/04.03.01.53. Affected by this issue is some unknown functionality of the file /etc/www/pem/server.key of the component ECDSA P-256…