← Database

CVE-2026-85109

CRITICAL CVSS: 9.8 Published: 2026-09-03 Modified: 2026-09-03

Description

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

Affected Platforms

Unknown

Weakness Type

CWE-119, CWE-120

References