CVE-2026-11553: Tenda HG7HG9/HG10 formPPPEdit stack-based overflow
A vulnerability was found in Tenda HG7HG9 and HG10 300001138enxpon. This affects the function formPPPEdit of the file /boaform/formPPPEdit. The manipulation of the argument encodename results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable remote web/administration access on the device so the formPPPEdit endpoint is not reachable from untrusted networks.
Tenda HG7HG9 / HG10 web management (formPPPEdit) remote_management = disabled - Compensating control
Block or restrict access to the device management interface and the /boaform/formPPPEdit endpoint at the network perimeter (firewall/ACL) — allow only trusted IPs or internal management networks; deny WAN access to management ports.
- Operational
Monitor devices for signs of exploitation (unexpected reboots, configuration changes, or requests to /boaform/formPPPEdit). Isolate any suspected compromised devices and apply vendor firmware updates or patches as soon as they become available.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-11553?
CVE-2026-11553 has a high severity score of 8.8.
How do I fix CVE-2026-11553?
To fix CVE-2026-11553, update the Tenda HG7/HG9 or HG10 firmware to the latest version provided by Tenda.
What does CVE-2026-11553 affect?
CVE-2026-11553 affects the formPPPEdit function in the Tenda HG7HG9 and HG10 routers.
Can CVE-2026-11553 be exploited remotely?
Yes, CVE-2026-11553 can be exploited remotely due to its exposed buffer overflow vulnerability.
What type of attack is associated with CVE-2026-11553?
CVE-2026-11553 is associated with a stack-based buffer overflow attack.