CVE-2026-7151Disclosure(tenda / hg3)

LOWCVSS 7.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was determined in Tenda HG3 2.0. Impacted is the function formUploadConfig of the file /boaform/formIPv6Routing. This manipulation of the argument destNet causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

tenda CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://www.notion.so/33e0c75766a88041bd86d3810994a541

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-119CWE-121

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

hg3
hg3_firmware

Threat summary

3 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 3 classified signals
Peaked 2d ago at 1 mentions (2026-04-26); latest day: 1
3 total mentions across 3 days

Affected systems

Vendors

tenda

Products

hg3hg3_firmware

2 versions affected across 2 products

Deep dive

Activity timeline3 mentions / 3d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets4 URLs

By indicator

Full discourse3 posts

Vulmon Vulnerability Feed@VulmonFeeds164d
Disclosure
CVE-2026-7151 Stack-Based Buffer Overflow in Tenda HG3 2.0 formUploadConfig Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7151 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The message announces CVE‑2026‑7151, a stack‑based buffer overflow in Tenda HG3 2.0’s formUploadConfig function, without discussing PoCs, exploits, or patches.
0000045
4.0K followersView on X
Kaitan ID Security@KaitanSecurity164d
Disclosure
⚠️ HIGH — CVE-2026-7151 A vulnerability was determined in Tenda HG3 2.0. Impacted is the function formUploadConfig of the file /boaform/formIPv… CVSS 8.8 Full analysis → https://sec.kaitan.id/cves/CVE-2026-7151 #Tenda #CyberSecurity #InfoSec
Post summary
This post announces a high‑severity vulnerability (CVE‑2026‑7151) in Tenda HG3 2.0’s formUploadConfig function with a CVSS score of 8.8, but offers no PoC, exploit code, patch, or active exploitation details.
0000046
141 followersView on X
VulDB 🛡@vuldb166d
Disclosure
We have just added an important vulnerability affecting Tenda HG3 (CVE-2026-7151) https://vuldb.com/vuln/359750
Post summary
A new vulnerability (CVE-2026-7151) affecting the Tenda HG3 has been documented, but no additional technical details, PoC, exploit code, or patch information are provided.
0000067
2.1K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	tenda	hg3	2.0	-	-
OS	tenda	hg3_firmware	300003070	-	-

Explore more

Back to dashboard tenda CVEs hg3 vulnerabilities