CVE-2026-11499

🚨 CVE-2026-11499 Tenda HG7 / HG9 / HG10 ルーターにおけるスタックベースのバッファオーバーフロー 📖 概要 CVE-2026-11499 は、いくつかの Tenda ルーターモデル （以下を含む）に影響を与える スタックベースのバッファオーバーフロー脆弱性 として報告されています。 HG7 HG9 HG10 悪用に成功すると、攻撃者はクラッシュ、サービス拒否を引き起こしたり、脆弱なコードパスとデプロイ構成によっては リモートコード実行 RCE を達成する可能性があります。 ⚠️ 技術的な詳細は現在限られており、公開情報の開示は進行中のようです。 🎯...

CVE-2022-30023

CVE-2022-30023 Tenda HG9 ルーターにおける認証済みコマンドインジェクション 使用法 root@kitploit: git clone https://github.com/Haniwa0x01/CVE-2022-30023 cd CVE-2022-30023 python exploit.py -u http://target -U "user" -P "password" 例 root@kitploit: pc@pc-note:/CVE-2022-30023/$ python3 exploit.py -u "http://10.0.0.1" -U "admin"...

Tenda HG7 / HG9 / HG10 Management Interface Assessment Module

This refactored Metasploit module shifts from denial of service testing toward defensive exposure assessment and configuration review. Rather than attempting exploitation or service disruption, it focuses on identifying exposed interfaces, weak configuration indicators, and improving visibility...

CVE-2026-11553 Tenda HG7HG9/HG10 formPPPEdit stack-based overflow

A vulnerability was found in Tenda HG7HG9 and HG10 300001138enxpon. This affects the function formPPPEdit of the file /boaform/formPPPEdit. The manipulation of the argument encodename results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been made public and...

Tenda多款产品 缓冲区错误漏洞

Tenda HG10, etc., are products of the Chinese company Tenda. The Tenda HG10 is a fiber-optic router. The Tenda HG9 is a WiFi router. The Tenda HG7 is a dual-band Wi-Fi fiber network terminal device. Several Tenda products have a buffer error vulnerability. This vulnerability stems from improper...

The vulnerability of the formPing() function on Boa HTTP-servers of Tenda HG9 microprogrammed routing software allows attackers to execute arbitrary code or cause service failures.

The vulnerability of the formPing function on Boa microprogrammed software-based Tenda HG9 routers stems from the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

The vulnerability of the formPing6() function in the Boa microprogramming software-based router Tenda HG9 HTTP server allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formPing6 function on the Boa microprogrammed software-based Tenda HG9 router’s HTTP server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

The vulnerability of the Boa HTTP-server microprogramming software-based routers from Tenda HG9 allows attackers to execute arbitrary code or cause service failures.

The vulnerability of the Boa HTTP-server microprogrammed routing software from Tenda HG9 involves the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

Tenda HG9 stack buffer overflow vulnerability

The Tenda HG9 is a WiFi router produced by the Chinese company Tenda. The Tenda HG9 has a stack buffer overflow vulnerability, which stems from incorrect handling of the parameter Ethtype in the file/boaform/formLoopBack of the Loopback Detection Configuration Endpoint component. Attackers can...

CVE-2026-2906

A security flaw has been discovered in Tenda HG9 300001138. Affected is an unknown function of the file /boaform/formSamba of the component Samba Configuration Endpoint. The manipulation of the argument sambaCap results in stack-based buffer overflow. The attack may be launched remotely. The...

CVE-2026-2908

A security vulnerability has been detected in Tenda HG9 300001138. Affected by this issue is some unknown functionality of the file /boaform/formLoopBack of the component Loopback Detection Configuration Endpoint. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The...

CVE-2026-2909

A vulnerability was detected in Tenda HG9 300001138. This affects an unknown part of the file /boaform/formPing of the component Diagnostic Ping Endpoint. Performing a manipulation of the argument pingAddr results in stack-based buffer overflow. The attack is possible to be carried out remotely...

CVE-2026-2905

A vulnerability was identified in Tenda HG9 300001138. This impacts an unknown function of the file /boaform/formWlanSetup of the component Wireless Configuration Endpoint. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack may be initiated remotely. The exploi...

CVE-2026-2910

A flaw has been found in Tenda HG9 300001138. This vulnerability affects unknown code of the file /boaform/formPing6. Executing a manipulation of the argument pingAddr can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used...

CVE-2026-2910

A flaw has been found in Tenda HG9 300001138. This vulnerability affects unknown code of the file /boaform/formPing6. Executing a manipulation of the argument pingAddr can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used...

CVE-2026-2910

A flaw has been found in Tenda HG9 300001138. This vulnerability affects unknown code of the file /boaform/formPing6. Executing a manipulation of the argument pingAddr can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used...

CVE-2026-2910 Tenda HG9 formPing6 stack-based overflow

A flaw has been found in Tenda HG9 300001138. This vulnerability affects unknown code of the file /boaform/formPing6. Executing a manipulation of the argument pingAddr can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used...

CVE-2026-2910 Tenda HG9 formPing6 stack-based overflow

A flaw has been found in Tenda HG9 300001138. This vulnerability affects unknown code of the file /boaform/formPing6. Executing a manipulation of the argument pingAddr can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used...

CVE-2026-2910

CVE-2026-2910 affects the Tenda HG9 line, specifically versions prior to 300001139. The vulnerability resides in the file /boaform/formPing6, where manipulating the pingAddr argument triggers a stack-based overflow. It can be exploited remotely, and an exploit has been published. Remediation: upg...

CVE-2026-2909

A vulnerability was detected in Tenda HG9 300001138. This affects an unknown part of the file /boaform/formPing of the component Diagnostic Ping Endpoint. Performing a manipulation of the argument pingAddr results in stack-based buffer overflow. The attack is possible to be carried out remotely...