CYBERHAWK / CVE / CVE-2026-11499

CVE-2026-11499

CRITICAL CVSS 9.8 other

The flaw

A vulnerability was determined in Tenda HG7HG9 and HG10 300001138_en_xpon. This affects the function formDOMAINBLK of the file /boaform/formDOMAINBLK. Executing a manipulation of the argument blkDomain can lead to stack-based buffer overflo

What to do

Review advisory and patch per vendor guidance.

▸ Scan my repo for CVE-2026-11499

References

First seen 2026-06-12 · Tracked by PickBits CyberHawk · Weekly CVE digest