Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2026-104610

Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow

Description

A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenda HG7

  • 300001138_en_xponaffected

Tenda HG9

  • 300001138_en_xponaffected

Tenda HG10

  • 300001138_en_xponaffected

References