Tenda HG7/HG9/HG10 vulnerabilities
3 known CVE vulnerabilities in Tenda HG7/HG9/HG10, translated and rated.
- CVE-2026-11499Critical
A vulnerability in Tenda HG7, HG9, and HG10 devices (firmware version 300001138_en_xpon) in the formDOMAINBLK function of /boaform/formDOMAINBLK. Manipulating the blkDomain argument leads to a stack-based buffer overflow. The attack can be performed remotely.
- CVE-2026-11553High
Vulnerability in Tenda HG7, HG9, and HG10 (version 300001138_en_xpon) in the formPPPEdit function. Manipulation of the encodename argument leads to stack-based buffer overflow, enabling remote attack.
- CVE-2026-11498High
In Tenda HG7, HG9, and HG10 devices with firmware 300001138_en_xpon, a stack-based buffer overflow exists in the asp_voip_OtherSet function in /boaform/voip_other_set of the Web Management Interface. Remote manipulation of the funckey_transfer argument triggers the overflow.