Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in Tenda HG3 2.0. This vulnerability affects the function formTracert of the file /boaform/formTracert. Executing a manipulation of the argument datasize can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-7160 A vulnerability was determined in Tenda HG3 2.0. This vulnerability affects the function formTracert of the file /boaform/formTracert. Executing a manipulation of the a… https://www.cve.org/CVERecord?id=CVE-2026-7160
Post summary
The post announces CVE-2026-7160 in Tenda HG3 2.0 firmware, detailing the affected function and file, but provides no evidence of exploitation, patch, or PoC.
⚠️ HIGH — CVE-2026-7160 A vulnerability was determined in Tenda HG3 2.0. This vulnerability affects the function formTracert of the file /boafo… CVSS 8.8 Full analysis → https://sec.kaitan.id/cves/CVE-2026-7160 #Tenda #CyberSecurity #InfoSec
Post summary
The tweet announces CVE‑2026‑7160 with a CVSS score of 8.8, affecting a function in Tenda HG3 2.0, and links to an external analysis.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | hg3 | 2.0 | - | - |
| OS | tenda | hg3_firmware | 300003070 | - | - |