CVE-2026-7160 | Tenda HG3 2.0 /boaform/formTracert datasize command injection

A vulnerability classified as critical was found in Tenda HG3 2.0. This vulnerability affects the function formTracert of the file /boaform/formTracert. Executing a manipulation of the argument datasize can lead to command injection.

This vulnerability appears as CVE-2026-7160. The attack may be performed from remote. In addition, an exploit is available.