Tenda
Tenda Hg10: vulnerabilidades y CVE
Tenda Hg10 tiene 10 vulnerabilidades publicadas, 10 de ellas en los últimos 12 meses. 3 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE10
Últimos 12 meses10
Críticas3
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-104610 | Crítica (9.3) | 0.64% | — | 2 oct 2026 | A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the… |
| CVE-2026-86167 | Alta (8.6) | 2.7% | — | 6 sept 2026 | A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boaform/admin/formgponConf of the component Boa. The manipulation of the argument fmgpon_loid leads to os… |
| CVE-2026-86166 | Alta (7.4) | 0.85% | — | 6 sept 2026 | A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the file /boaform/formWanRedirect of the component Boa Web Server. Executing a manipulation of the argument if… |
| CVE-2026-86165 | Alta (8.9) | 1.1% | — | 6 sept 2026 | A vulnerability was found in Tenda HG10 300001138. This vulnerability affects the function formURL of the file /boaform/admin/formURL. Performing a manipulation of the argument Keywd/urlFQDN results in buffer overflow.… |
| CVE-2026-85110 | Alta (7.4) | 0.85% | — | 3 sept 2026 | A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of the file /boaform/formWlanSetup of the component Boa Web Server. The manipulation of the argument ssid leads to buffer… |
| CVE-2026-85109 | Alta (8.9) | 1.1% | — | 3 sept 2026 | A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can… |
| CVE-2026-82542 | Crítica (9.3) | 1.1% | — | 30 ago 2026 | A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa Web Server. This manipulation of the… |
| CVE-2026-11553 | Alta (7.4) | 0.48% | — | 8 jun 2026 | A vulnerability was found in Tenda HG7, HG9 and HG10 300001138_en_xpon. This affects the function formPPPEdit of the file /boaform/formPPPEdit. The manipulation of the argument encodename results in stack-based buffer… |
| CVE-2026-11499 | Crítica (9.3) | 6.6% | — | 8 jun 2026 | A vulnerability was determined in Tenda HG7, HG9 and HG10 300001138_en_xpon. This affects the function formDOMAINBLK of the file /boaform/formDOMAINBLK. Executing a manipulation of the argument blkDomain can lead to… |
| CVE-2026-11498 | Alta (8.7) | 3.8% | — | 8 jun 2026 | A vulnerability was found in Tenda HG7, HG9 and HG10 300001138_en_xpon. Affected by this issue is the function asp_voip_OtherSet of the file /boaform/voip_other_set of the component Web Management Interface. Performing… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.