GCVE - cpe:2.3:h:tenda:hg3:2.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:tenda:hg3:2.0:*:*:*:*:*:*:*

part: h version: 2.0 update: *

Vendor	Tenda (`cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42`)
Product	Hg3 (`5e436958-44b5-530f-b026-f790dd727a78`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-7160`	not_vulnerable	2026-06-08 08:07:05.456265	Tenda HG3 formTracert command injection HIGH (8.8) A vulnerability was determined in Tenda HG3 2.0. This vulnerability affects the function formTracert of the file /boaform/formTracert. Executing a manipulation of the argument datasize can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. Published: 2026-04-27T21:30:17.351Z Updated: 2026-04-28T14:35:44.664Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/359759 https://vuldb.com/vuln/359759/cti https://vuldb.com/submit/802079 https://www.notion.so/33e0c75766a880488924cf24523acf6c https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-7151`	not_vulnerable	2026-06-08 08:07:05.444363	Tenda HG3 formIPv6Routing formUploadConfig stack-based overflow HIGH (8.8) A vulnerability was determined in Tenda HG3 2.0. Impacted is the function formUploadConfig of the file /boaform/formIPv6Routing. This manipulation of the argument destNet causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. Published: 2026-04-27T19:15:12.308Z Updated: 2026-04-29T13:58:39.461Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/359750 https://vuldb.com/vuln/359750/cti https://vuldb.com/submit/802058 https://www.notion.so/33e0c75766a88041bd86d3810994a541 https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-7119`	not_vulnerable	2026-06-08 08:07:05.413457	Tenda HG3 formCountrystr os command injection HIGH (8.8) A vulnerability was detected in Tenda HG3 2.0. The impacted element is an unknown function of the file /boaform/formCountrystr. The manipulation of the argument countrystr results in os command injection. The attack may be performed from remote. The exploit is now public and may be used. Published: 2026-04-27T11:30:15.501Z Updated: 2026-04-27T13:21:21.717Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/359719 https://vuldb.com/vuln/359719/cti https://vuldb.com/submit/800859 https://www.notion.so/Tenda-HG3-1-33d0c75766a8808d8b38e9d090cec7ab https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-7096`	not_vulnerable	2026-06-08 08:07:05.388460	Tenda HG3 formgponConf os command injection HIGH (8.8) A security flaw has been discovered in Tenda HG3 2.0 300003070. This vulnerability affects the function formgponConf of the file /boaform/admin/formgponConf. The manipulation of the argument fmgpon_loid results in os command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. Published: 2026-04-27T06:45:14.049Z Updated: 2026-04-27T11:02:25.326Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/359671 https://vuldb.com/vuln/359671/cti https://vuldb.com/submit/800796 https://www.notion.so/Tenda-HG3-3250c75766a880c7b50fde0466557c5f https://www.tenda.com.cn/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.