VulnSocial

CVE-2026-7096Disclosure(tenda / hg3)

LOWCVSS 7.4 · HIGH

Signal is active with 4 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security flaw has been discovered in Tenda HG3 2.0 300003070. This vulnerability affects the function formgponConf of the file /boaform/admin/formgponConf. The manipulation of the argument fmgpon_loid results in os command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.

tenda CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-77CWE-78

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • hg3
  • hg3_firmware

Threat summary

  • 4 mentions across 1 observed day

What's happening

  • Technical details provided in 4 signals
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • 4 total mentions across 1 day

Affected systems

Vendors
tenda
Products
hg3hg3_firmware

2 versions affected across 2 products

Deep dive

Activity timeline4 mentions / 1d
01234Mentions · 2026-04-27: 4Technical Details · 2026-04-27: 404-27
Signal classification2 categories
Disclosure
375.0%
General
125.0%
Referenced assets5 URLs
Full discourse4 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-7096 A security flaw has been discovered in Tenda HG3 2.0 300003070. This vulnerability affects the function formgponConf of the file /boaform/admin/formgponConf. The manipu… https://www.cve.org/CVERecord?id=CVE-2026-7096 ----- Traducción: CVE-2026-7096 Se … http://infoflow.cloud`

    Post summary

    A newly discovered vulnerability (CVE-2026-7096) was reported in Tenda HG3 devices, affecting the formgponConf function, with no PoC, exploit, patch, or active exploitation details provided.

    0000034
    72 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-7096 A security flaw has been discovered in Tenda HG3 2.0 300003070. This vulnerability affects the function formgponConf of the file /boaform/admin/formgponConf. The manipu… https://www.cve.org/CVERecord?id=CVE-2026-7096

    Post summary

    The post notes a newly discovered flaw in the Tenda HG3 router’s formgponConf function, with technical details provided and a link to the CVE record for further information.

    00000131
    57.3K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-7096 OS Command Injection in Tenda HG3 2.0 300003070 formgponConf Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7096 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3

    Post summary

    The post announces an OS Command Injection vulnerability in Tenda HG3 2.0 and links to a vulnerability notification, but offers no exploit or mitigation details.

    0000040
    4.0K followersView on X
  • Kaitan ID Security@KaitanSecurity
    Disclosure

    ⚠️ HIGH — CVE-2026-7096 A security flaw has been discovered in Tenda HG3 2.0 300003070. This vulnerability affects the function formgponConf of… CVSS 8.8 Full analysis → https://sec.kaitan.id/cves/CVE-2026-7096 #Tenda #CyberSecurity #InfoSec

    Post summary

    A new high‑severity vulnerability (CVE‑2026‑7096) disclosed for the Tenda HG3 2.0 router, affecting the formgponConf function with a CVSS score of 8.8, but no further technical, exploit, patch, or exploitation details are provided.

    0000044
    142 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
HWtendahg32.0--
OStendahg3_firmware300003070--

Explore more

Back to dashboardtenda CVEshg3 vulnerabilities