24276 matches found
CVE-2026-77031
A command injection vulnerability exists in Tenda CH22 firmware version 1.0.0.1 . The affected element is the formcreateFileName function in the file /goform/formcreateFileName, where improper handling of the fileNameMit argument allows an attacker to inject and execute arbitrary commands. The at...
EUVD-2026-63486
A vulnerability has been found in Tenda CH22 1.0.0.1. The affected element is the function formcreateFileName of the file /goform/formcreateFileName. The manipulation of the argument fileNameMit leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to th...
CVE-2026-77031 Tenda CH22 formcreateFileName command injection
A vulnerability has been found in Tenda CH22 1.0.0.1. The affected element is the function formcreateFileName of the file /goform/formcreateFileName. The manipulation of the argument fileNameMit leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to th...
CVE-2026-77031: Improper Neutralization of Special Elements used in a Command
A vulnerability has been found in Tenda CH22 1.0.0.1. The affected element is the function formcreateFileName of the file /goform/formcreateFileName. The manipulation of the argument fileNameMit leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to th...
PT-2026-79085
A vulnerability has been found in Tenda CH22 1.0.0.1. The affected element is the function formcreateFileName of the file /goform/formcreateFileName. The manipulation of the argument fileNameMit leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to th...
The vulnerabilities of the functions set_wl_guest_iplist() and fromSetWifiGusetBasic() in the microprogramming software for the Tenda AC12 router, file US_AC1206V1.0RTL_V15.03.06.23_multi_TD01.bin, allow a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerabilities of the functions setwlguestiplist and fromSetWifiGusetBasic of the Tenda AC12 router are related to the occurrence of operations outside the buffer in memory. Exploiting these vulnerabilities could allow a remote attacker to compromise the confidentiality, integrity, and...
The vulnerability of the formSetRebootTimer() function in the Tenda AC12 router microprogramming system, located in the file US_AC1206V1.0RTL_V15.03.06.23_multi_TD01.bin, allows a intruder to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the formSetRebootTimer function in the Tenda AC12 router’s file USAC1206V1.0RTLV15.03.06.23multiTD01.bin is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...
The vulnerabilities of the functions formSetDeviceName() and set_device_name() in the file US_AC1206V1.0RTL_V15.03.06.23_multi_TD01.bin of the Tenda AC12 router’s microprogramming system, which allow a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerabilities of the functions formSetDeviceName and setdevicename in the file USAC1206V1.0RTLV15.03.06.23multiTD01.bin of the Tenda AC12 router’s microprogramming system are related to the execution of operations outside the buffer in memory. Exploiting these vulnerabilities could allow an...
CVE-2026-67966
Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...
CVE-2026-67967
Buffer Overflow vulnerability in Tenda W20E V16.01.0.62782 allows an attacker to execute arbitrary code. This is an incomplete fix for CVE-2025-44867 and CVE-2026-36819...
Tenda AC10: Identity Authentication Vulnerability
The Tenda AC10 is a dual-band Gigabit wireless router launched by Shenzhen Jixiang Tengda Technology Co., Ltd. in September 2017. The Tenda AC10 has a vulnerability related to authentication processing. This vulnerability stems from the R7WebsSecurityHandler function in the httpd component, which...
CVE-2026-67967: Stack-based Buffer Overflow
Buffer Overflow vulnerability in Tenda W20E V16.01.0.62782 allows an attacker to execute arbitrary code. This is an incomplete fix for CVE-2025-44867 and CVE-2026-36819...
PT-2026-76795
🚨 CVE-2026-67967 Buffer Overflow vulnerability in Tenda W20E V16.01.0.62782 allows an attacker to execute arbitrary code. This is an incomplete fix for CVE-2025-44867 and CVE-2026-36819 🎖@cveNotify...
CVE-2026-67966: Missing Authentication for Critical Function
Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...
PT-2026-76794
Name of the Vulnerable Software and Affected Versions Tenda W20E version V16.01.0.62782 Description The '/goform/telnet' endpoint allows unauthenticated remote attackers to activate the Telnet daemon, which enables them to obtain root shell access to the device. Recommendations At the moment, the...
EUVD-2026-60537
Buffer Overflow vulnerability in Tenda W20E V16.01.0.62782 allows an attacker to execute arbitrary code. This is an incomplete fix for CVE-2025-44867 and CVE-2026-36819...
EUVD-2026-60538
Tenda W20E V16.01.0.62782 /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shell access...
CVE-2026-67967
A stack-based buffer overflow and command injection vulnerability exists in the Tenda W20E V5.0 wireless router running firmware US_W20EV5.0qu_V16.01.0.6(2782)_CN&EN_TDE01.bin. The flaw occurs in the /goform/module API, where the setDhcpStaticBindList.bindMACAddr handler uses strcpy() without len...
CVE-2026-67966
The Tenda W20E V5.0 wireless router (running firmware US_W20EV5.0qu_V16.01.0.6(2782)_CN&EN_TDE01.bin) is vulnerable to an unauthenticated remote attack via the /goform/telnet endpoint. This vulnerability allows an attacker to activate the Telnet daemon and install iptables rules that expose port ...
