Mmastodon TechnologyCybersecurity first seen 15 h ago, last 15 h ago, peak #12

Critical 10/10 vulnerability disclosed in Tenda routers

Original: 🚨 EUVD-2026-91570 📊 Score: 10.0/10 (CVSS v3.1) 📦 Product: HG9, HG7, HG10 🏢 Vendor: Tenda 📅 Updated: 2026-10-02 📝 A secur

A maximum-severity security flaw, tracked as EUVD-2026-91570 with a CVSS score of 10.0, has been disclosed in Tenda HG7, HG9 and HG10 routers running the 300001138_en_xpon firmware. The vulnerability lies in the boaGetVar function in the /boaform/formLoopBack file. The advisory was updated on 2 October 2026, and security watchers are sharing the disclosure.

Why now: A newly disclosed maximum-severity flaw in widely used consumer routers draws immediate attention from the security community.

TendaHG7HG9HG10EUVD-2026-91570

Open on mastodon →

Evidence

• 🚨 EUVD-2026-91570 📊 Score: 10.0/10 (CVSS v3.1) 📦 Product: HG9, HG7, HG10 🏢 Vendor: Tenda 📅 Updated: 2026-10-02 📝 A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/742543