Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-2907

Tenda HG9 GPON Configuration Endpoint formgponConf stack-based overflow

Description

A weakness has been identified in Tenda HG9 300001138. Affected by this vulnerability is an unknown functionality of the file /boaform/formgponConf of the component GPON Configuration Endpoint. This manipulation of the argument fmgpon_loid/fmgpon_loid_password causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenda HG9

  • 300001138affected

References