CVE-2026-38142

AI Predicted 9.8 Difficulty: Easy EPSS 0.69% · P48 Updated Jul 02, 2026

Possible ATT&CK Techniques 2AI

T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

Vendor	Product	Version Range	Status
n/a	n/a	`n/a`	affected

Get alerts for future matching vulnerabilitiesLog in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

An unauthenticated command injection vulnerability in the /goform/fast_setting_internet_set endpoint of Tenda AC18 v15.03.05.05 allows attackers to execute arbitrary commands via a crafted payload injected into the mac parameter.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2026-38142

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2026-38142

请登录查看更多情报信息。

Proof of Concept for CVE-2026-38142 (1)

🔗 Tenda-ac-18-V15.03.05.05-/Tenda AC18 Unauthenticated Second-Order OS Command Injection in goformfast_setting_internet_set.pdf at main · longqx223/Tenda-ac-18-V15.03.05.05- · GitHub Read full article

https://nvd.nist.gov/vuln/detail/CVE-2026-38142

Same Patch Batch · n/a · 2026-07-01 · 10 CVEs total

CVE-2026-36909		MPC-BE < 4341cb3空指针解引用导致DoS
CVE-2026-36910		Aleksoid1978 MPC-BE 未指定版本访问违规导致拒绝服务
CVE-2026-36912		MPC-BE空指针解引用致DoS
CVE-2026-36911		MPC-BE CStreamSwitcherOutputPin决定缓冲区大小拒绝服务漏洞
CVE-2026-52186		nv518G nv518GV3 3.2.7 SQL注入漏洞
CVE-2026-52190		UTP nv518G/V3缓冲区溢出致拒绝服务
CVE-2026-38891		Gazebo v3.9.0插件输入验证缺陷致DoS
CVE-2026-51947		Pivotal CRM反序列化漏洞（影响6.6.4.08）
CVE-2026-51946		GoAdmin v1.2.26 SQL注入漏洞

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2026-38142

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-38142

Possible ATT&CK Techniques 2AI

Affected Version Matrix 1

I. Basic Information for CVE-2026-38142

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2026-38142

III. Intelligence Information for CVE-2026-38142

Proof of Concept for CVE-2026-38142 (1)

Same Patch Batch · n/a · 2026-07-01 · 10 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2026-38142

Leave a comment