Skip to content
OpenAdvisories

Product · Tenda

HG7

4 known vulnerabilities.

HG7 at a glance

Last 12 months
4
Critical · all time
2
Exploited · all time
0
Public exploit · all time
2
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 3 vulnerabilities, 1 critical Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 1 vulnerability, 1 critical November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202611
Sep 202600
Aug 202600
Jul 202600
Jun 202631
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400
All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Critical 10.0
    CVE-2026-104610

    Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow

    A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buff…

    Tenda HG10 HG9 HG7
  • High 8.8
    CVE-2026-11553 Public exploit

    Tenda HG7/HG9/HG10 formPPPEdit stack-based overflow

    A vulnerability was found in Tenda HG7, HG9 and HG10 300001138_en_xpon. This affects the function formPPPEdit of the file /boaform/formPPPEdit. The manipulation of the argument encodename results in stack-based buffer overflow. The attack can be launched remo…

    Tenda HG10 HG9 HG7
  • Critical 9.8
    CVE-2026-11499 Public exploit

    Tenda HG7/HG9/HG10 formDOMAINBLK stack-based overflow

    A vulnerability was determined in Tenda HG7, HG9 and HG10 300001138_en_xpon. This affects the function formDOMAINBLK of the file /boaform/formDOMAINBLK. Executing a manipulation of the argument blkDomain can lead to stack-based buffer overflow. The attack may…

    Tenda HG10 HG9 HG7
  • High 8.8
    CVE-2026-11498

    Tenda HG7/HG9/HG10 Web Management voip_other_set asp_voip_OtherSet stack-based overflow

    A vulnerability was found in Tenda HG7, HG9 and HG10 300001138_en_xpon. Affected by this issue is the function asp_voip_OtherSet of the file /boaform/voip_other_set of the component Web Management Interface. Performing a manipulation of the argument funckey_t…

    Tenda HG10 HG9 HG7