THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-86167 (CRITICAL 9.9) — A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boaform/admin/formgponConf of the component Boa. The manipulation of the argument fmgpon_loid leads to os command injection. Remote exploitation of the attack is possible. T

[NVD] CVE-2026-86167 (CRITICAL 9.9) — A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boaform/admin/formgponConf of the component Boa. The manipulation of the argument fmgpon_loid leads to os command injection. Remote exploitation of the attack is possible. T

mednvdPublished 2026-09-06

CVE-2026-86167 CVSS: 9.9 CRITICAL Published: 2026-09-06T05:16:50.477

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formgponConf of the file /boaform/admin/formgponConf of the component Boa. The manipulation of the argument fmgpon_loid leads to os command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used

Indicators of compromise

CVE-2026-86167cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-86167