High severity8.8NVD Advisory· Published Feb 22, 2026· Updated Jun 17, 2026
CVE-2026-2908
CVE-2026-2908
Description
A security vulnerability has been detected in Tenda HG9 300001138. Affected by this issue is some unknown functionality of the file /boaform/formLoopBack of the component Loopback Detection Configuration Endpoint. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:tenda:hg9_firmware:300001138:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
5- github.com/QIU-DIE/cve-nneeww/issues/10nvdExploitIssue TrackingMitigationThird Party Advisory
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdPermissions RequiredVDB Entry
- www.tenda.com.cnnvdProduct
News mentions
0No linked articles in our index yet.