CVE-2026-85110
Received Received - Intake

Buffer Overflow in Tenda HG10 Web Server

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: VulDB

Description
A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of the file /boaform/formWlanSetup of the component Boa Web Server. The manipulation of the argument ssid leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-03
Last Modified
2026-09-03
Generated
2026-09-03
AI Q&A
2026-09-03
EPSS Evaluated
N/A
NVD
CVE-2026-85110
EUVD
EUVD-2026-70471

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
tenda hg10 300001138

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a buffer overflow in the Tenda HG10 router's Boa Web Server. It occurs in the formWlanSetup function when the ssid argument is manipulated. This flaw allows remote attackers to execute arbitrary code or cause a denial of service by sending specially crafted input.

Detection Guidance

To detect this vulnerability, scan your network for devices running the Tenda HG10 with the vulnerable Boa Web Server. Check for open ports 80 or 8080. Use commands like 'nmap -p 80,8080 <target_IP>' to identify exposed services. Inspect HTTP responses for the Boa server version. Monitor for unusual traffic patterns targeting the /boaform/formWlanSetup endpoint.

Impact Analysis

An attacker could exploit this to take control of the router, steal sensitive data, or disrupt network services. Since the exploit is publicly available, the risk of real-world attacks is high. Users should update their firmware immediately.

Mitigation Strategies

Immediately disconnect the device from the internet or isolate it in a separate network segment. Disable the Boa Web Server if possible. Update the device firmware to the latest version if a patch is available. Block external access to ports 80 and 8080 using a firewall. Monitor for signs of exploitation and reset the device to factory defaults if compromised.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-85110. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart