CVE-2022-26289

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/exeCommand...

Tenda M3 Router Command Injection (CVE-2022-26289)

A command injection vulnerability exists in Tenda M3 Router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2022-26289

The CVE concerns a command-injection flaw in Tenda M3 routers, with exploitation via the component /goform/exeCommand. Affected device: Tenda M3 (firmware variant noted as 1.10 V1.0.0.12(4856)). Root cause is not explicitly detailed beyond the command-injection vectors via /goform/exeCommand. Imp...