Medium severity · published Jan 30, 2026
CVE-2026-1690
Tenda HG10 formSysCmd system command injection
4.7
CVSS
4.7%
EPSS
No
On KEV
Description
A flaw has been found in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. This affects the function system of the file /boaform/formSysCmd. This manipulation of the argument sysCmd causes command injection. The attack may be initiated remotely. The exploit has been published and may be used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.7% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HG
HG10 · Tenda
US_HG7_HG9_HG10re_300001138_en_xpon · source: vendor
HF
Hg10 Firmware · Tenda
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-1690
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-1690
Exploit
https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/Tenda/HG10/formSysCmd-sysCmd-command.md
Exploit
https://github.com/SunnyYANGyaya/cuicuishark-sheep-fishIOT/blob/main/Tenda/HG10/formSysCmd-sysCmd-command.md#poc
Permissions Required
https://vuldb.com/?ctiid.343484
Third Party Advisory
https://vuldb.com/?id.343484
Third Party Advisory
https://vuldb.com/?submit.741425
Product
https://www.tenda.com.cn/
More from HG10
10.0
CVE-2026-82542
Tenda HG10 Boa Web Server formIPv6Routing buffer overflow
9.9
CVE-2026-86167
Tenda HG10 Boa formgponConf os command injection
9.8
CVE-2026-86165
Tenda HG10 formURL buffer overflow
9.8
CVE-2026-85109
Tenda HG10 Boa Web Server formLogin buffer overflow
8.8
CVE-2026-86166
Tenda HG10 Boa Web Server formWanRedirect buffer overflow