This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-7160 | BDVDB-2026-329239 Detail

TendaHG3

Description#

A vulnerability was determined in Tenda HG3 2.0. This vulnerability affects the function formTracert of the file /boaform/formTracert. Executing a manipulation of the argument datasize can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

Impact#

Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: network.

Weaknesses#

  • CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
  • CWE-74 Injection

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.