CVE-2026-1690

CVE-2026-1690 affects Tenda HG10 family devices (HG10/HG7/HG9/HG10re_300001138_en_xpon). The flaw resides in the /boaform/formSysCmd handler, where manipulation of the sysCmd argument enables command injection. Attacks may be initiated remotely over the network; exploitation has been published an...