CVE-2026-104610: Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow
A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138enxpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
Which devices and firmware are identified as affected?
The affected products are Tenda HG7, HG9, and HG10 devices running firmware 300001138_en_xpon. The issue is in the Boa Web Server endpoint /boaform/formLoopBack.
What does an attacker need to exploit this issue?
The vulnerability can be exploited remotely by manipulating the Ethtype argument processed by boaGetVar. No privileges or user interaction are indicated as required.
How serious is exploitation?
Successful exploitation causes a stack-based buffer overflow and is rated critical, with high impact to confidentiality, integrity, and availability. A public exploit has been disclosed, increasing the likelihood of attempted exploitation.