CVE-2026-86167 | Tenda HG10 300001138 Boa formgponConf fmgpon_loid os command injection

September 5, 2026 Yanac

A vulnerability marked as very critical has been reported in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boaform/admin/formgponConf of the component Boa. The manipulation of the argument fmgpon_loid leads to os command injection.

This vulnerability is referenced as CVE-2026-86167. Remote exploitation of the attack is possible. Furthermore, an exploit is available.VulDB Recent EntriesRead More