CVE-2026-86165
Received Received - Intake

Buffer Overflow in Tenda HG10 Firmware via formURL

Publication date: 2026-09-06

Last updated on: 2026-09-06

Assigner: VulDB

Description
A vulnerability was found in Tenda HG10 300001138. This vulnerability affects the function formURL of the file /boaform/admin/formURL. Performing a manipulation of the argument Keywd/urlFQDN results in buffer overflow. The attack may be initiated remotely. The exploit has been made public and could be used.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-06
Last Modified
2026-09-06
Generated
2026-09-06
AI Q&A
2026-09-06
EPSS Evaluated
N/A
NVD
CVE-2026-86165
EUVD
EUVD-2026-72049

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
tenda hg10 300001138

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-86165 is a buffer overflow vulnerability in the Tenda HG10 AC1200 Dualband Wi-Fi xPON ONT router. The flaw exists in the Boa web server's formURL interface, specifically in the handling of the Keywd parameter. Due to insufficient length validation, a remote attacker can exploit this by sending a crafted HTTP POST request to the endpoint /boaform/admin/formURL with an excessively long Keywd value. The unsafe use of strcpy in the code allows the attacker to overwrite adjacent memory, leading to a denial-of-service condition where the router becomes unresponsive.

Detection Guidance

To detect this vulnerability, monitor network traffic for HTTP POST requests to /boaform/admin/formURL with unusually long Keywd parameter values. Use packet capture tools like tcpdump or Wireshark to inspect requests targeting the Boa web server on Tenda HG10 devices.

Impact Analysis

This vulnerability allows remote attackers to cause a denial-of-service by crashing the router, making it unresponsive. An attacker could exploit this to disrupt network services, potentially leading to loss of internet connectivity or other connected device failures.

Mitigation Strategies

Immediately update the Tenda HG10 firmware to the latest version if available. If no patch exists, restrict access to the Boa web server by blocking external connections to port 80/443 via firewall rules. Disable remote administration features if not required.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-86165. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart