CVE-2026-85109
CRITICAL
NVD
CVSS Score
9.8
Severity
CRITICAL
Published
Sep 03, 2026
Vendor
unknown
Description
A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.