Is CVE-2026-85110 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-85110?

CVE-2026-85110 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-85110

Description

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of the file /boaform/formWlanSetup of the component Boa Web Server. The manipulation of the argument ssid leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.