Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was detected in Tenda HG3 2.0. The impacted element is an unknown function of the file /boaform/formCountrystr. The manipulation of the argument countrystr results in os command injection. The attack may be performed from remote. The exploit is now public and may be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-7119 A vulnerability was detected in Tenda HG3 2.0. The impacted element is an unknown function of the file /boaform/formCountrystr. The manipulation of the argument country… https://www.cve.org/CVERecord?id=CVE-2026-7119
Post summary
The statement notes CVE‑2026‑7119 in Tenda HG3 2.0 involving a file‑level function and argument manipulation but provides no evidence of exploitation, patches, or PoC.
⚠️ HIGH — CVE-2026-7119 A vulnerability was detected in Tenda HG3 2.0. The impacted element is an unknown function of the file /boaform/formCou… CVSS 8.8 Full analysis → https://sec.kaitan.id/cves/CVE-2026-7119 #Tenda #CyberSecurity #InfoSec
Post summary
A high‑severity CVE-2026-7119 was disclosed in Tenda HG3 2.0, affecting an unknown function in /boaform/formCou, with a CVSS score of 8.8 and a link to full analysis but no PoC, exploit, or patch info.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | hg3 | 2.0 | - | - |
| OS | tenda | hg3_firmware | 300003070 | - | - |