PT-2026-35159 · Tenda · Hg10

Xuanyu · Published 2026-04-25 · Updated 2026-04-25 · CVE-2026-6988

NVD

CVSS v2.0

9.0

High

AV:N/AC:L/Au:S/C:C/I:C/A:C

A flaw has been found in Tenda HG10 HG7 HG9 HG10re 300001138 en xpon. This issue affects the function formRoute of the file /boaform/formRouting of the component Boa Service. This manipulation of the argument nextHop causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

CWE-119

Related Identifiers

CVE-2026-6988

Affected Products

Hg10

References · 8

• 🔥 https://github.com/xyh4ck/iot_poc/blob/main/Tenda/HG10/01_Buffer_Overflow_nextHop/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-6988 · Security Note
• https://twitter.com/VulmonFeeds/status/2048120560077455818 · Twitter Post
• https://vuldb.com/submit/796427 · Note
• https://tenda.com.cn · Note
• https://vuldb.com/vuln/359540/cti · Note
• https://twitter.com/CVEnew/status/2048099258557980822 · Twitter Post
• https://vuldb.com/vuln/359540 · Note