Tenda HG9 Firmware vulnerabilities

7 CVEs affecting Tenda HG9 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-2910, published 2026-02-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-30023, published 2022-06-16. High severity, CVSS 8.8. EPSS: 39.2% chance of exploitation in the next 30 days. Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.
CVE-2026-2910, published 2026-02-22. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A flaw has been found in Tenda HG9 300001138. This vulnerability affects unknown code of the file /boaform/formPing6. Executing a manipulation of the argument pingAddr can lead to stack-based buffer…
CVE-2026-2909, published 2026-02-22. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was detected in Tenda HG9 300001138. This affects an unknown part of the file /boaform/formPing of the component Diagnostic Ping Endpoint. Performing a manipulation of the argument…
CVE-2026-2908, published 2026-02-22. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A security vulnerability has been detected in Tenda HG9 300001138. Affected by this issue is some unknown functionality of the file /boaform/formLoopBack of the component Loopback Detection…
CVE-2026-2907, published 2026-02-22. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A weakness has been identified in Tenda HG9 300001138. Affected by this vulnerability is an unknown functionality of the file /boaform/formgponConf of the component GPON Configuration Endpoint. This…
CVE-2026-2906, published 2026-02-22. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A security flaw has been discovered in Tenda HG9 300001138. Affected is an unknown function of the file /boaform/formSamba of the component Samba Configuration Endpoint. The manipulation of the…
CVE-2026-2905, published 2026-02-22. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was identified in Tenda HG9 300001138. This impacts an unknown function of the file /boaform/formWlanSetup of the component Wireless Configuration Endpoint. The manipulation of the…