CVE-2026-11499: Tenda HG7HG9/HG10 formDOMAINBLK stack-based overflow
A vulnerability was determined in Tenda HG7HG9 and HG10 300001138enxpon. This affects the function formDOMAINBLK of the file /boaform/formDOMAINBLK. Executing a manipulation of the argument blkDomain can lead to stack-based buffer overflow. The attack may be performed from remote.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Prevent remote exploitation by restricting access to the device management/web interface: disable WAN/remote management if enabled, restrict management access to trusted IPs, and block or filter HTTP(S) requests to the /boaform/formDOMAINBLK endpoint (and requests containing the blkDomain parameter) at the network edge (firewall, WAF, or reverse proxy).
- Operational
Monitor device and web-access logs for requests targeting /boaform/formDOMAINBLK and the blkDomain parameter; investigate and isolate any signs of compromise. Apply vendor-supplied firmware updates or patches for these Tenda HG7HG9/HG10 devices as soon as they become available.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-11499?
CVE-2026-11499 has a critical severity score of 9.8.
How do I fix CVE-2026-11499?
To fix CVE-2026-11499, update to the latest firmware version provided by Tenda for HG7HG9 and HG10 devices.
What type of vulnerability is CVE-2026-11499?
CVE-2026-11499 is a buffer overflow vulnerability that can be exploited remotely.
Which devices are affected by CVE-2026-11499?
The Tenda HG7HG9 and HG10 models are affected by CVE-2026-11499.
What are the potential impacts of exploiting CVE-2026-11499?
Exploiting CVE-2026-11499 may allow an attacker to execute arbitrary code, leading to possible system compromise and data loss.