What is the CVSS score of CVE-2026-2905?

CVE-2026-2905 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Hg9 Firmware are affected by CVE-2026-2905?

A critical vulnerability affecting Tenda HG9 wireless routers could allow unauthorized attackers to compromise network configuration without authentication.

Is there a public PoC exploit available for CVE-2026-2905?

Yes, a public proof-of-concept exploit is available for CVE-2026-2905. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-2905?

Within 24 hours: Identify all Tenda HG9 300001138 devices in your environment and isolate them from critical network segments. Within 7 days: Evaluate replacement options or implement compensating controls (network segmentation, WAF rules blocking /boaform/formWlanSetup access). Within 30 days: Complete migration to patched hardware or alternative vendor solutions; document all affected devices and their remediation status.

Hg9 Firmware CVE-2026-2905

HIGH

Buffer Overflow (CWE-119)

2026-02-22 cna@vuldb.com

Buffer Overflow Stack Overflow Hg9 Firmware

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:04 vuln.today

PoC Detected

Feb 23, 2026 - 20:22 vuln.today

Public exploit code

CVE Published

Feb 22, 2026 - 02:16 nvd

HIGH 8.8

DescriptionCVE.org

A vulnerability was identified in Tenda HG9 300001138. This impacts an unknown function of the file /boaform/formWlanSetup of the component Wireless Configuration Endpoint. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used.

AnalysisAI

Stack buffer overflow in Tenda HG9 firmware's wireless configuration endpoint allows authenticated remote attackers to achieve arbitrary code execution through a malicious SSID parameter. Public exploit code exists for this vulnerability, increasing the risk of active exploitation. The vulnerability affects the /boaform/formWlanSetup component and currently has no available patch.

Technical ContextAI

Classified as CWE-119 (Buffer Overflow). Affects Hg9 Firmware. A vulnerability was identified in Tenda HG9 300001138. This impacts an unknown function of the file /boaform/formWlanSetup of the component Wireless Configuration Endpoint. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used.

RemediationAI

Monitor vendor advisories for a patch. Enable ASLR, DEP/NX, and stack canaries where possible. Restrict network access to the affected service where possible.