Tenda Hg10 vulnerabilities

14 vulnerabilities

Known vulnerabilities in Tenda Hg10, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CriticalCVE-2026-86165tenda · hg10_firmwareTenda HG10 formURL buffer overflowA vulnerability was found in Tenda HG10 300001138. This vulnerability affects the function formURL of the file /boaform/admin/formURL. Performing a manipulation of the argument Keywd/urlFQDN results in buffer overflow. The attack may be initiated remotely. The exploit has been made public and could be used.EPSS1.13%9CriticalCVE-2026-86166tenda · hg10_firmwareTenda HG10 Boa Web Server formWanRedirect buffer overflowA vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the file /boaform/formWanRedirect of the component Boa Web Server. Executing a manipulation of the argument if can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.EPSS0.85%9.9CriticalCVE-2026-86167tenda · hg10_firmwareTenda HG10 Boa formgponConf os command injectionA vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boaform/admin/formgponConf of the component Boa. The manipulation of the argument fmgpon_loid leads to os command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.EPSS2.73%7.5HighCVE-2026-1689tenda · hg10_firmwareTenda HG10 Login formLogin checkUserFromLanOrWan command injectionA vulnerability was detected in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. The impacted element is the function checkUserFromLanOrWan of the file /boaform/admin/formLogin of the component Login Interface. The manipulation of the argument Host results in command injection. The attack can be launched remotely. The exploit is now public and may be used.EPSS3.13%5.8MediumCVE-2026-1690tenda · hg10_firmwareTenda HG10 formSysCmd system command injectionA flaw has been found in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. This affects the function system of the file /boaform/formSysCmd. This manipulation of the argument sysCmd causes command injection. The attack may be initiated remotely. The exploit has been published and may be used.EPSS4.75%7.5HighCVE-2026-1687tenda · hg10_firmwareTenda HG10 Boa Webserver formSamba command injectionA weakness has been identified in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. Impacted is an unknown function of the file /boaform/formSamba of the component Boa Webserver. Executing a manipulation of the argument serverString can lead to command injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.EPSS3.23%9CriticalCVE-2026-11553tenda · hg10_firmware +2 moreTenda HG7/HG9/HG10 formPPPEdit stack-based overflowA vulnerability was found in Tenda HG7, HG9 and HG10 300001138_en_xpon. This affects the function formPPPEdit of the file /boaform/formPPPEdit. The manipulation of the argument encodename results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.EPSS0.48%10CriticalCVE-2026-11499tenda · hg10_firmware +2 moreTenda HG7/HG9/HG10 formDOMAINBLK stack-based overflowA vulnerability was determined in Tenda HG7, HG9 and HG10 300001138_en_xpon. This affects the function formDOMAINBLK of the file /boaform/formDOMAINBLK. Executing a manipulation of the argument blkDomain can lead to stack-based buffer overflow. The attack may be performed from remote.EPSS6.64%9CriticalCVE-2026-11498tenda · hg10_firmware +2 moreTenda HG7/HG9/HG10 Web Management voip_other_set asp_voip_OtherSet stack-based overflowA vulnerability was found in Tenda HG7, HG9 and HG10 300001138_en_xpon. Affected by this issue is the function asp_voip_OtherSet of the file /boaform/voip_other_set of the component Web Management Interface. Performing a manipulation of the argument funckey_transfer results in stack-based buffer overflow. The attack is possible to be carried out remotely.EPSS3.80%10CriticalCVE-2026-104610tenda · hg10_firmware +2 moreTenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflowA security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.EPSS0.64%9CriticalCVE-2026-6988tenda · hg10_firmwareTenda HG10 Boa Service formRouting formRoute buffer overflowA flaw has been found in Tenda HG10 HG7_HG9_HG10re_300001138_en_xpon. This issue affects the function formRoute of the file /boaform/formRouting of the component Boa Service. This manipulation of the argument nextHop causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used.EPSS1.01%10CriticalCVE-2026-82542tenda · hg10_firmwareTenda HG10 Boa Web Server formIPv6Routing buffer overflowA weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa Web Server. This manipulation of the argument destNet causes buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.EPSS1.10%9CriticalCVE-2026-85110tenda · hg10_firmwareTenda HG10 Boa Web Server formWlanSetup buffer overflowA vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of the file /boaform/formWlanSetup of the component Boa Web Server. The manipulation of the argument ssid leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.EPSS0.85%10CriticalCVE-2026-85109tenda · hg10_firmwareTenda HG10 Boa Web Server formLogin buffer overflowA vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.EPSS1.10%