CVE-2026-19346

CVE-2026-19346 affects Tenda CH22 firmware 1.0.0.1. The vulnerability is in the formCertListInfo function of /goform/CertListInfo, where manipulating the Name argument can trigger remote command injection. Exploitation is described as remote and has been publicly disclosed. CVSS metrics indicate ...