CVE-2026-85110

Name of the Vulnerable Software and Affected Versions Tenda HG10 300001138 (affected versions not specified)

Description A buffer overflow exists in the Boa Web Server component within the formWlanSetup() function of the /boaform/formWlanSetup file. This issue occurs when the ssid argument is manipulated, allowing for remote exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the /boaform/formWlanSetup endpoint to minimize the risk of exploitation.