← back
CVE-2026-11499

Tenda HG7HG9/HG10 formDOMAINBLK stack-based overflow

CVSS 9.3 CRITICALEPSS 6.6%CWE-119CWE-121
A vulnerability was determined in Tenda HG7HG9 and HG10 300001138_en_xpon. This affects the function formDOMAINBLK of the file /boaform/formDOMAINBLK. Executing a manipulation of the argument blkDomain can lead to stack-based buffer overflow. The attack may be performed from remote.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X
Affected products
Tenda · HG10Tenda · HG7HG9
public PoCs found — 1
githubgithub.com/0xBlackash/CVE-2026-11499★ 1
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/ssaaaa1234/Tenda-HG10-formDOMAINBLK-stack-overflow-2https://vuldb.com/cve/CVE-2026-11499https://vuldb.com/submit/834888https://vuldb.com/vuln/369119https://vuldb.com/vuln/369119/ctihttps://www.tenda.com.cn/