PT-2026-104299 · Tenda · Hg10+2

·

CVE-2026-104610

·

Published

2026-10-02

·

Updated

2026-10-02

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138 en xpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.

Exploit

Fix

Buffer Overflow

Stack Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-104610

Affected Products

Hg10
Hg7
Hg9