Approved changes feed: RSS · Atom

cpe:2.3:h:tenda:hg7hg9:*:*:*:*:*:*:*:*

part: h version: * update: *

VendorTenda (cebb1c0a-7ddd-5bf6-9fc6-52b2b4f8dd42)
ProductHg7Hg9 (464d1c01-f359-50f0-b0d9-c796f04db1ba)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-11553 vulnerable 2026-07-29 00:23:31.411196 Tenda HG7HG9/HG10 formPPPEdit stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda HG7HG9 and HG10 300001138_en_xpon. This affects the function formPPPEdit of the file /boaform/formPPPEdit. The manipulation of the argument encodename results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.
Published: 2026-06-08T17:15:11.855Z
Updated: 2026-06-08T18:49:14.135Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11499 vulnerable 2026-07-29 00:23:31.287259 Tenda HG7HG9/HG10 formDOMAINBLK stack-based overflow
CRITICAL (9.8)
A vulnerability was determined in Tenda HG7HG9 and HG10 300001138_en_xpon. This affects the function formDOMAINBLK of the file /boaform/formDOMAINBLK. Executing a manipulation of the argument blkDomain can lead to stack-based buffer overflow. The attack may be performed from remote.
Published: 2026-06-08T07:00:23.672Z
Updated: 2026-06-08T12:55:29.374Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11498 vulnerable 2026-07-29 00:23:31.277639 Tenda HG7HG9/HG10 Web Management voip_other_set asp_voip_OtherSet stack-based overflow
HIGH (8.8)
A vulnerability was found in Tenda HG7HG9 and HG10 300001138_en_xpon. Affected by this issue is the function asp_voip_OtherSet of the file /boaform/voip_other_set of the component Web Management Interface. Performing a manipulation of the argument funckey_transfer results in stack-based buffer overflow. The attack is possible to be carried out remotely.
Published: 2026-06-08T06:45:21.289Z
Updated: 2026-06-08T16:22:24.244Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.