PT-2026-35365 · Tenda · Hg3

2Er00Ne · Published 2026-04-27 · Updated 2026-04-27 · CVE-2026-7096

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tenda HG3 version 2.0 300003070

Description An OS command injection flaw allows remote attackers to execute arbitrary operating system commands. The issue exists within the formgponConf() function located in the '/boaform/admin/formgponConf' endpoint, specifically through the manipulation of the fmgpon loid variable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the '/boaform/admin/formgponConf' endpoint or avoid using the fmgpon loid parameter to minimize the risk of exploitation.

Exploit

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

CVE-2026-7096

Affected Products

Hg3

References · 12

• 🔥 https://notion.so/Tenda-HG3-3250c75766a880c7b50fde0466557c5f · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7096 · Security Note
• https://twitter.com/KaitanSecurity/status/2048681060649615802 · Twitter Post
• https://tenda.com.cn · Note
• https://twitter.com/CVEnew/status/2048852247916712350 · Twitter Post
• https://vuldb.com/vuln/359671/cti · Note
• https://t.me/cveNotify/161034 · Telegram Post
• https://twitter.com/infoflowcloud/status/2048853871884202231 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2048694212250456537 · Twitter Post
• https://vuldb.com/submit/800796 · Note
• https://t.me/CVEtracker/51913 · Telegram Post
• https://vuldb.com/vuln/359671 · Note