VulnSocial

CVE-2026-82542PoC

LOWCVSS 9.3 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Prioritize remediation for affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa Web Server. This manipulation of the argument destNet causes buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.

Back to dashboard
3.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-119CWE-120

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

  • Public PoC and exploit tooling are both present
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-08-30); latest day: 1
  • 3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-08-30: 1Mentions · 2026-08-31: 1Mentions · 2026-09-05: 1PoC Mentioned / Linked · 2026-08-31: 1PoC Mentioned / Linked · 2026-09-05: 1Exploit Tool / Code · 2026-08-31: 1Technical Details · 2026-08-30: 1Technical Details · 2026-08-31: 1Technical Details · 2026-09-05: 108-3008-3109-05
Signal classification2 categories
PoC
266.7%
Disclosure
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-08-301
Disclosure1
2026-08-311
PoC1
2026-09-051
PoC1
Full discourse3 posts
  • SecAlerts@SecAlertsCo
    PoC

    🔁 Tenda HG10 router: critical buffer overflow in formIPv6Routing via /boaform/admin/formIPv6Routing. No auth, no interaction, network-accessible. CVSS 9.3. CVE-2026-82542 has a PoC. Check your routers. #cybersecurity #cve #vulnerabilities #msp https://secalerts.co/vulnerability/CVE-2026-82542?utm_campaign=x https://t.co/s11YRjlZsG

    Post summary

    The post announces a critical buffer overflow on Tenda HG10 routers, mentions a PoC is available, and provides technical details but no exploit, patch, or active exploitation evidence.

    0000090
    889 followersView on X
  • ThreatAft@ThreatAft
    PoC

    🚨 Tenda HG10 — CVSS 10.0 CRITICAL CVE-2026-82542: Unauthenticated stack overflow in Boa Web Server → formIPv6Routing → root RCE → Public PoC → NO PATCH → https://threataft.com/articles/tenda-hg10-cve-2026-82542-unauthenticated-rce #cybersecurity #infosec #Tenda #RouterSecurity #CVSS10 #NoPatch #RCE #ThreatIntel

    Post summary

    CVE-2026-82542 affects Tenda HG10, causing unauthenticated stack overflow leading to root RCE. A public PoC is available, but no patch has been released yet.

    0000096
    39 followersView on X
  • ADK Cyber@ADKCyber
    Disclosure

    Critical CVE-2026-82542 (CVSS 10.0) in Tenda HG10 affects formIPv6Routing on Boa Web Server. Assess exposure if this model is in use: https://nvd.nist.gov/vuln/detail/CVE-2026-82542 via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/o9umdF4ypH

    Post summary

    The tweet announces a newly disclosed critical CVE‑2026‑82542 affecting Tenda HG10 Boa Web Servers with a CVSS score of 10.0 and links to the NVD page for details.

    0000069
    95 followersView on X

Explore more

Back to dashboard