CVE-2026-5527Disclosure(tenda / 4g03_pro)

LOWCVSS 5.5 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A weakness has been identified in Tenda 4G03 Pro 1.0/1.0re/01.bin/04.03.01.53. Affected by this issue is some unknown functionality of the file /etc/www/pem/server.key of the component ECDSA P-256 Private Key Handler. This manipulation causes use of hard-coded cryptographic key . It is possible to initiate the attack remotely.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-320CWE-321

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • 4g03_pro
  • 4g03_pro_firmware

Threat summary

  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • Peaked at 3 mentions on most recent observed day (2026-04-05)
  • 4 total mentions across 2 days

Affected systems

Vendors
Products
4g03_pro4g03_pro_firmware

2 versions affected across 2 products

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-04-04: 1Mentions · 2026-04-05: 3Technical Details · 2026-04-05: 104-0404-05
Signal classification2 categories
Disclosure
375.0%
General
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-04-041
Disclosure1
2026-04-053
Disclosure2General1
Full discourse4 posts
  • CVEarity@CVEarity
    General

    ⚡ New CVE Alert: CVE-2026-5527 📊 Severity: 5.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-5527 #CVE-2026-5527 #CVE #Medium #CyberSecurity #InfoSec https://t.co/dHfNCByP8e

    Post summary

    The tweet simply announces CVE-2026-5527 with a severity rating and links to the NVD entry, but offers no further technical, exploit, or mitigation details.

    0000034
    121 followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    Disclosure

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-5527 - Tenda 4G03 Pro ECDSA P-256 Private Key server.key hard-coded key Intel Report: https://ift.tt/Mk0fhs7

    Post summary

    The alert announces CVE‑2026‑5527 for Tenda 4G03 Pro and details a hard‑coded ECDSA P‑256 private key, but does not provide PoC, exploit code, patches, or evidence of active exploitation.

    0000040
    281 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-5527 A weakness has been identified in Tenda 4G03 Pro 1.0/1.0re/01.bin/04.03.01.53. Affected by this issue is some unknown functionality of the file /etc/www/pem/server.key … https://www.cve.org/CVERecord?id=CVE-2026-5527 ----- Traducción: CVE-2026-5527 Se … http://infoflow.cloud`

    Post summary

    A new weakness (CVE‑2026‑5527) in Tenda 4G03 Pro involving an unknown issue with /etc/www/pem/server.key has been reported; only the CVE record is cited.

    0000042
    63 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-5527 A weakness has been identified in Tenda 4G03 Pro 1.0/1.0re/01.bin/04.03.01.53. Affected by this issue is some unknown functionality of the file /etc/www/pem/server.key … https://www.cve.org/CVERecord?id=CVE-2026-5527

    Post summary

    A review of Tenda 4G03 Pro firmware reveals an unidentified weakness related to the /etc/www/pem/server.key file, with no details on exploitation, mitigation, or breach evidence.

    00000552
    57.0K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
HWtenda4g03_pro1.0--
OStenda4g03_pro_firmware04.03.01.53--

Explore more