Description
A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-09-03
Score: 9.3 Critical
EPSS: 1.1% Low
KEV: No
Impact: Remote Buffer Overflow leading to potential Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

A buffer overflow flaw exists in the Boa Web Server’s formLogin function on Tenda HG10 routers, triggered by a crafted Username argument. The vulnerability allows an attacker to overflow the stack and execute arbitrary code, potentially yielding full control of the device. The flaw is a classic case of CWE-119 and CWE-120, indicating improper bounds checking of user input.

Affected Systems

The vulnerability affects Tenda HG10 routers, specifically firmware version 300001138. Users running this firmware model should verify whether newer releases contain the fix.

Risk and Exploitability

The flaw carries a CVSS score of 9.3, indicating a critical severity. No EPSS data is available, and the issue is not yet listed in the CISA KEV catalog, but the exploit is publicly disclosed and can be launched remotely by sending a special Username field to the /boaform/formLogin endpoint. The attack requires no additional access privileges and could lead to full system compromise.

Generated by OpenCVE AI on September 3, 2026 at 14:47 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest firmware update to the Tenda HG10 that resolves the buffer overflow in Boa Web Server.
  • If a patch is not yet available, limit remote access to the router by disabling BOA Web Server or restricting management to the local network only, and block traffic to the /boaform/formLogin endpoint from external sources.
  • Change the default administrative credentials promptly after installation or re‑initialization to reduce the risk of credential‑based exploitation.

Generated by OpenCVE AI on September 3, 2026 at 14:47 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 03 Sep 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 03 Sep 2026 15:00:00 +0000

Type Values Removed Values Added
First Time appeared Tenda hg10
Vendors & Products Tenda hg10

Thu, 03 Sep 2026 13:45:00 +0000

Type Values Removed Values Added
Description A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Title Tenda HG10 Boa Web Server formLogin buffer overflow
First Time appeared Tenda
Tenda hg10 Firmware
Weaknesses CWE-119
CWE-120
CPEs cpe:2.3:o:tenda:hg10_firmware:*:*:*:*:*:*:*:*
Vendors & Products Tenda
Tenda hg10 Firmware
References
Metrics cvssV2_0

{'score': 10, 'vector': 'AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 9.8, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 9.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Tenda Hg10 Hg10 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-09-03T14:29:53.673Z

Reserved: 2026-09-03T06:53:31.120Z

Link: CVE-2026-85109

cve-icon Vulnrichment

Updated: 2026-09-03T14:15:24.863Z

cve-icon NVD

Status : Deferred

Published: 2026-09-03T14:17:04.663

Modified: 2026-09-03T17:25:25.113

Link: CVE-2026-85109

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-03T15:00:06Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-120

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')