Tenda HG10 Firmware vulnerabilities

4 CVEs affecting Tenda HG10 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-6988, published 2026-04-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-1690, published 2026-01-30. Medium severity, CVSS 4.7. EPSS: 4.7% chance of exploitation in the next 30 days. A flaw has been found in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. This affects the function system of the file /boaform/formSysCmd. This manipulation of the argument sysCmd causes command…
CVE-2026-1687, published 2026-01-30. High severity, CVSS 7.3. EPSS: 3.2% chance of exploitation in the next 30 days. A weakness has been identified in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. Impacted is an unknown function of the file /boaform/formSamba of the component Boa Webserver. Executing a…
CVE-2026-1689, published 2026-01-30. High severity, CVSS 7.3. EPSS: 3.1% chance of exploitation in the next 30 days. A vulnerability was detected in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. The impacted element is the function checkUserFromLanOrWan of the file /boaform/admin/formLogin of the component Login…
CVE-2026-6988, published 2026-04-25. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A flaw has been found in Tenda HG10 HG7_HG9_HG10re_300001138_en_xpon. This issue affects the function formRoute of the file /boaform/formRouting of the component Boa Service. This manipulation of the…