The vulnerability of the FormWriteFacMac function in the /goform/WriteFacMac file of the Tenda CH22 software allows a perpetrator to execute arbitrary commands.

The vulnerability of the FormWriteFacMac function in the /goform/WriteFacMac file of the Tenda CH22 microprogramming system is related to the failure to take measures to neutralize special elements during the processing of the mac parameter. Exploiting this vulnerability can allow an attacker to...

The vulnerability of the Parameter Handler component in the fromAdvSetWan function of the /goform/AdvSetWan microprogramming system Tenda CH22, which allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Parameter Handler component in the fromAdvSetWan function of the /goform/AdvSetWan microprogramming system Tenda CH22 is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the Parameter Handler component in the fromSetCfm function of the /goform/setcfm microprogramming system Tenda CH22, which allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Parameter Handler component in the fromSetCfm function of the /goform/setcfm microprogramming system Tenda CH22 is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the formWrlExtraSet function (/goform/WrlExtraSet) of the Tenda CH22 router software allows a attacker to execute arbitrary code or cause service interruptions.

The vulnerability of the formWrlExtraSet /goform/WrlExtraSet function in the Tenda CH22 router microprogramming system lies in the reading of data outside the buffer in memory during the processing of the GO parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or...

The vulnerability of the formWebTypeLibrary function in the /goform/webtypelibrary file of the Parameter Handler component of the Tenda CH22 router microprogramming system, related to the issue of writing operations outside of the buffer in memory, allows a attacker to execute arbitrary code or cause service failures.

The vulnerability of the formWebTypeLibrary function in the /goform/webtypelibrary file of the Parameter Handler component of the Tenda CH22 router microprogramming system is related to the issue of the operation going beyond the buffer boundaries during the processing of the wpapskcrypto...

The vulnerability of the formCreateFileName() function in the Tenda CH22 router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the formCreateFileName function in the Tenda CH22 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

VulnCheck KEV: CVE-2026-78141

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

VulnCheck KEV: CVE-2026-5153

A flaw has been found in Tenda CH22 1.0.0.1. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. Executing a manipulation of the argument mac can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used...

MINI-G47F-CH22-PC6Q

Bulletin has no description...

The vulnerability of the formeditFileName() function in the Tenda CH22 router’s software allows a hacker to execute arbitrary code.

The vulnerability of the formeditFileName function in the Tenda CH22 router’s software lies in the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the formexeCommand() function in the Tenda CH22 router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formexeCommand function in the Tenda CH22 router’s microprogramming system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the formcreateFileName() function in the /goform/formcreateFileName file of the Tenda CH22 router’s microprogramming system allows a attacker to execute arbitrary commands.

The vulnerability of the formcreateFileName function in the /goform/formcreateFileName file of the Tenda CH22 router microprogramming system is related to the failure to take measures to eliminate special elements in the output data. Exploiting this vulnerability may allow a remote attacker to...

EUVD-2026-64666

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2026-78141

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2026-78141 Tenda CH22 exeCommand formexeCommand command injection

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2026-78141

The Tenda CH22 router (version 1.0.0.1) contains a command injection vulnerability within the formexeCommand function of the /goform/exeCommand file. The root cause is the improper neutralization of special elements used in a command, specifically via the manipulation of the cmdinput argument. Th...

CVE-2026-78141 Tenda CH22 exeCommand formexeCommand command injection

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2026-78063

A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument editNameMit results in command injection. The attack can be launched remotely. The exploit has been released to the...

CVE-2026-78063 Tenda CH22 editFileName formeditFileName command injection

A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument editNameMit results in command injection. The attack can be launched remotely. The exploit has been released to the...

CVE-2026-78063 Tenda CH22 editFileName formeditFileName command injection

A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument editNameMit results in command injection. The attack can be launched remotely. The exploit has been released to the...