Vulnerability Description
A vulnerability was determined in Tenda HG3 2.0. This vulnerability affects the function formTracert of the file /boaform/formTracert. Executing a manipulation of the argument datasize can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tenda | Hg3 Firmware | 300003070 |
| Tenda | Hg3 | 2.0 |
Related Weaknesses (CWE)
References
- https://vuldb.com/submit/802079Third Party AdvisoryVDB Entry
- https://vuldb.com/vuln/359759Third Party AdvisoryVDB Entry
- https://vuldb.com/vuln/359759/ctiPermissions RequiredVDB Entry
- https://www.notion.so/33e0c75766a880488924cf24523acf6cExploitThird Party Advisory
- https://www.tenda.com.cn/Product
FAQ
What is CVE-2026-7160?
CVE-2026-7160 is a vulnerability with a CVSS score of 8.8 (HIGH). A vulnerability was determined in Tenda HG3 2.0. This vulnerability affects the function formTracert of the file /boaform/formTracert. Executing a manipulation of the argument datasize can lead to com...
How severe is CVE-2026-7160?
CVE-2026-7160 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-7160?
Check the references section above for vendor advisories and patch information. Affected products include: Tenda Hg3 Firmware, Tenda Hg3.