https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T20:54:31.412223+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-11666 CVE-2025-11666 — Tenda RP3 Pro Firmware Update force_upgrade.sh hard-coded password 2026-10-07T20:54:31.426925+00:00

Affected: Tenda RP3 Pro

A flaw has been found in Tenda RP3 Pro up to 22.5.7.93. This impacts an unknown function of the file force_upgrade.sh of the component Firmware Update Handler. Executing manipulation of the argument current_force_upgrade_pwd can lead to use of hard-coded password. The attack can only be executed locally. The exploit has been published and may be used.