← Back to CVE search

CVE-2026-11499

Tenda HG7HG9 and HG10

Description

A vulnerability was determined in Tenda HG7HG9 and HG10 300001138_en_xpon. This affects the function formDOMAINBLK of the file /boaform/formDOMAINBLK. Executing a manipulation of the argument blkDomain can lead to stack-based buffer overflow. The attack may be performed from remote.

CVSS 9.8EPSS 6.561%Risk 1.56
View source
Published
2026-06-08 09:16:29
Affected versions
cannotmatch
Type
Firmware
Last modified
2026-07-23 07:10:00
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H