Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in Tenda HG10 HG7_HG9_HG10re_300001138_en_xpon. This issue affects the function formRoute of the file /boaform/formRouting of the component Boa Service. This manipulation of the argument nextHop causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-6988 Buffer Overflow in Tenda HG10 Boa Service formRoute Function via nextHop Parameter https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6988
Post summary
A buffer overflow vulnerability (CVE-2026-6988) in the Tenda HG10 Boa Service formRoute function has been disclosed with a reference link, but no PoC, exploit, or patch information is included.
CVE-2026-6988 A flaw has been found in Tenda HG10 HG7_HG9_HG10re_300001138_en_xpon. This issue affects the function formRoute of the file /boaform/formRouting of the component Boa Se… https://www.cve.org/CVERecord?id=CVE-2026-6988
Post summary
The post announces a flaw in Tenda routers affecting the formRoute function within the Boa component, but it does not provide any PoC, exploit code, active exploitation evidence, or patch information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | hg10 | - | - | - |
| OS | tenda | hg10_firmware | 300001138 | - | - |