{"id":"CVE-2026-86166","title":"A vulnerability was determined in Tenda HG10 300001138","summary":"A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the file /boaform/formWanRedirect of the component Boa Web Server. Executing a manipulation of the argument if can lead to buffer …","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-119","CWE-120"],"vendor":"Tenda","product":"HG10","affected":["HG10 300001138"],"published":"2026-09-06","updated":"2026-09-11","sourceUpdated":"2026-09-11T21:17:35.040","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86166","references":[{"url":"https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/Tenda/HG10/bof-formWanRedirect-if.md","label":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-86166","label":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/895595","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399305","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399305/cti","label":"cna@vuldb.com"},{"url":"https://www.tenda.com.cn/","label":"cna@vuldb.com"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"total","timestamp":"2026-09-11T20:15:48.470389Z"},"epss":0.00476,"epssPercentile":0.40176,"ingestedAt":"2026-09-06T15:57:05.415Z","slug":"CVE-2026-86166","body":"## Overview\n\nA vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the file /boaform/formWanRedirect of the component Boa Web Server. Executing a manipulation of the argument if can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":60,"depthScoreParts":{"impact":48.4,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":202078,"id":"CVE-2026-86166","ts":1789400047924,"field":"exploit_available","old":"false","new":"true"},{"seq":200805,"id":"CVE-2026-86166","ts":1789397616112,"field":"exploit_available","old":"true","new":"false"},{"seq":199498,"id":"CVE-2026-86166","ts":1789395528605,"field":"exploit_available","old":"false","new":"true"},{"seq":198743,"id":"CVE-2026-86166","ts":1789392243778,"field":"exploit_available","old":"true","new":"false"},{"seq":197076,"id":"CVE-2026-86166","ts":1789384292139,"field":"exploit_available","old":"false","new":"true"},{"seq":196385,"id":"CVE-2026-86166","ts":1789383756621,"field":"exploit_available","old":"true","new":"false"},{"seq":195830,"id":"CVE-2026-86166","ts":1789380634536,"field":"exploit_available","old":"false","new":"true"},{"seq":194205,"id":"CVE-2026-86166","ts":1789378782783,"field":"exploit_available","old":"true","new":"false"},{"seq":192992,"id":"CVE-2026-86166","ts":1789376514789,"field":"exploit_available","old":"false","new":"true"},{"seq":191779,"id":"CVE-2026-86166","ts":1789373630796,"field":"exploit_available","old":"true","new":"false"},{"seq":190564,"id":"CVE-2026-86166","ts":1789369475133,"field":"exploit_available","old":"false","new":"true"},{"seq":189351,"id":"CVE-2026-86166","ts":1789368409071,"field":"exploit_available","old":"true","new":"false"},{"seq":188134,"id":"CVE-2026-86166","ts":1789365230472,"field":"exploit_available","old":"false","new":"true"},{"seq":186921,"id":"CVE-2026-86166","ts":1789363470978,"field":"exploit_available","old":"true","new":"false"},{"seq":185707,"id":"CVE-2026-86166","ts":1789361228840,"field":"exploit_available","old":"false","new":"true"},{"seq":184494,"id":"CVE-2026-86166","ts":1789358363410,"field":"exploit_available","old":"true","new":"false"},{"seq":182745,"id":"CVE-2026-86166","ts":1789354316852,"field":"exploit_available","old":"false","new":"true"},{"seq":181538,"id":"CVE-2026-86166","ts":1789353317392,"field":"exploit_available","old":"true","new":"false"},{"seq":180331,"id":"CVE-2026-86166","ts":1789350284425,"field":"exploit_available","old":"false","new":"true"},{"seq":179124,"id":"CVE-2026-86166","ts":1789348292561,"field":"exploit_available","old":"true","new":"false"},{"seq":177917,"id":"CVE-2026-86166","ts":1789346369728,"field":"exploit_available","old":"false","new":"true"},{"seq":176710,"id":"CVE-2026-86166","ts":1789343184212,"field":"exploit_available","old":"true","new":"false"},{"seq":174827,"id":"CVE-2026-86166","ts":1789334875401,"field":"exploit_available","old":"false","new":"true"},{"seq":173622,"id":"CVE-2026-86166","ts":1789333686570,"field":"exploit_available","old":"true","new":"false"},{"seq":172436,"id":"CVE-2026-86166","ts":1789331092732,"field":"exploit_available","old":"false","new":"true"},{"seq":171250,"id":"CVE-2026-86166","ts":1789328780586,"field":"exploit_available","old":"true","new":"false"},{"seq":170045,"id":"CVE-2026-86166","ts":1789327196866,"field":"exploit_available","old":"false","new":"true"},{"seq":168840,"id":"CVE-2026-86166","ts":1789323839769,"field":"exploit_available","old":"true","new":"false"},{"seq":167635,"id":"CVE-2026-86166","ts":1789319702219,"field":"exploit_available","old":"false","new":"true"},{"seq":166430,"id":"CVE-2026-86166","ts":1789318775829,"field":"exploit_available","old":"true","new":"false"},{"seq":165225,"id":"CVE-2026-86166","ts":1789315789707,"field":"exploit_available","old":"false","new":"true"},{"seq":164020,"id":"CVE-2026-86166","ts":1789313633976,"field":"exploit_available","old":"true","new":"false"},{"seq":162815,"id":"CVE-2026-86166","ts":1789311903130,"field":"exploit_available","old":"false","new":"true"},{"seq":161610,"id":"CVE-2026-86166","ts":1789308732912,"field":"exploit_available","old":"true","new":"false"},{"seq":159723,"id":"CVE-2026-86166","ts":1789300470288,"field":"exploit_available","old":"false","new":"true"},{"seq":158835,"id":"CVE-2026-86166","ts":1789299572012,"field":"exploit_available","old":"true","new":"false"},{"seq":158295,"id":"CVE-2026-86166","ts":1789296693077,"field":"exploit_available","old":"false","new":"true"},{"seq":156712,"id":"CVE-2026-86166","ts":1789294755346,"field":"exploit_available","old":"true","new":"false"},{"seq":155507,"id":"CVE-2026-86166","ts":1789292967643,"field":"exploit_available","old":"false","new":"true"},{"seq":154302,"id":"CVE-2026-86166","ts":1789289797292,"field":"exploit_available","old":"true","new":"false"},{"seq":151553,"id":"CVE-2026-86166","ts":1789277629575,"field":"exploit_available","old":"false","new":"true"},{"seq":150514,"id":"CVE-2026-86166","ts":1789276245347,"field":"exploit_available","old":"true","new":"false"},{"seq":149481,"id":"CVE-2026-86166","ts":1789273824415,"field":"exploit_available","old":"false","new":"true"},{"seq":148448,"id":"CVE-2026-86166","ts":1789271348439,"field":"exploit_available","old":"true","new":"false"},{"seq":146479,"id":"CVE-2026-86166","ts":1789269397731,"field":"exploit_available","old":"false","new":"true"},{"seq":145284,"id":"CVE-2026-86166","ts":1789266339272,"field":"exploit_available","old":"true","new":"false"},{"seq":144188,"id":"CVE-2026-86166","ts":1789262616456,"field":"exploit_available","old":"false","new":"true"},{"seq":143092,"id":"CVE-2026-86166","ts":1789261533134,"field":"exploit_available","old":"true","new":"false"},{"seq":141923,"id":"CVE-2026-86166","ts":1789258831484,"field":"exploit_available","old":"false","new":"true"},{"seq":140764,"id":"CVE-2026-86166","ts":1789256726857,"field":"exploit_available","old":"true","new":"false"}]}