CVE-2026-7096

A security flaw has been discovered in Tenda HG3 2.0 300003070. This vulnerability affects the function formgponConf of the file /boaform/admin/formgponConf. The manipulation of the argument fmgpon_loid results in os command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.

• CWE-77
• CWE-78

• https://vuldb.com/submit/800796Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/359671Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/359671/ctiPermissions Required, VDB Entry
• https://www.notion.so/Tenda-HG3-3250c75766a880c7b50fde0466557c5fExploit, Third Party Advisory
• https://www.tenda.com.cn/Product

Published

Apr 27, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-70954Vulnerability in the Oracle Commerce Platform product of Ora…9.8
• CVE-2026-70955Vulnerability in the Oracle Commerce Platform product of Ora…7.5
• CVE-2026-70956Vulnerability in the Oracle Hyperion Infrastructure Technolo…8.8
• CVE-2026-70957Vulnerability in the Oracle Hyperion Infrastructure Technolo…8.1
• CVE-2026-70958Vulnerability in the Oracle Hyperion Infrastructure Technolo…9.6
• CVE-2026-70959Vulnerability in the Oracle Hyperion Infrastructure Technolo…8.1
• CVE-2026-70960Vulnerability in the Oracle Hyperion Financial Management pr…7.6
• CVE-2026-70961Vulnerability in the Oracle Hyperion Infrastructure Technolo…6.1
• CVE-2026-70962Vulnerability in the Oracle Hyperion Infrastructure Technolo…3.3
• CVE-2026-70963Vulnerability in the Oracle Hyperion Infrastructure Technolo…4.2
• CVE-2026-70964Vulnerability in the Oracle Hyperion Infrastructure Technolo…8.2
• CVE-2026-70965Vulnerability in the Oracle Hyperion Infrastructure Technolo…8.8