Which versions of Tenda are affected by CVE-2026-1687?

A high-severity command injection vulnerability (CVE-2026-1687) affects Hg10 Firmware with a public exploit available, enabling attackers to execute arbitrary commands on vulnerable devices.

Is there a public PoC exploit available for CVE-2026-1687?

Yes, a public proof-of-concept exploit is available for CVE-2026-1687. Prioritise patching immediately. EPSS: 5.3%.

How to fix or mitigate CVE-2026-1687?

Within 24 hours: Identify and inventory all Hg10 devices in your environment and assess their firmware versions; immediately implement network segmentation to isolate affected devices from critical systems. Within 7 days: Deploy compensating controls such as WAF rules to block command injection payloads and restrict administrative access to affected devices; implement enhanced monitoring and logging on Hg10 devices for suspicious activity. Within 30 days: Contact vendor for patch availability timeline; develop and execute a phased remediation plan; conduct forensic analysis if compromise is suspected.

Tenda CVE-2026-1687

Q: What is the CVSS score of CVE-2026-1687?

CVE-2026-1687 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 5.3%.

MEDIUM

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') (CWE-74)

2026-01-30 cna@vuldb.com

Command Injection Tenda

5.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

HIGH MEDIUM

CVSS changed

Apr 29, 2026 - 01:11 NVD

7.3 (HIGH) 5.5 (MEDIUM)

Analysis Generated

Mar 12, 2026 - 22:00 vuln.today

PoC Detected

Feb 10, 2026 - 15:14 vuln.today

Public exploit code

CVE Published

Jan 30, 2026 - 16:16 nvd

HIGH 7.3

DescriptionCVE.org

A weakness has been identified in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. Impacted is an unknown function of the file /boaform/formSamba of the component Boa Webserver. Executing a manipulation of the argument serverString can lead to command injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.

AnalysisAI

Hg10 Firmware versions up to - contains a vulnerability that allows attackers to command injection (CVSS 7.3).

Technical ContextAI

affects Hg10 Firmware. A weakness has been identified in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. Impacted is an unknown function of the file /boaform/formSamba of the component Boa Webserver. Executing a manipulation of the argument serverString can lead to command injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.