Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-11499

Tenda HG7/HG9/HG10 formDOMAINBLK stack-based overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was determined in Tenda HG7, HG9 and HG10 300001138_en_xpon. This affects the function formDOMAINBLK of the file /boaform/formDOMAINBLK. Executing a manipulation of the argument blkDomain can lead to stack-based buffer overflow. The attack may be performed from remote.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenda HG7

  • 300001138_en_xponaffected

Tenda HG9

  • 300001138_en_xponaffected

Tenda HG10

  • 300001138_en_xponaffected

References