CVE-2026-85109

Name of the Vulnerable Software and Affected Versions Tenda HG10 300001138 (affected versions not specified)

Description A buffer overflow can be triggered remotely within the Boa Web Server component. The issue exists in the formLogin() function located in the /boaform/formLogin file when the Username argument is manipulated. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is allocated to hold, potentially leading to crashes or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the /boaform/formLogin endpoint to minimize the risk of exploitation.