CVE-2025-9006

CVE-2025-9006 affects Tenda CH22 (version 1.0.0.1). The vulnerability lies in the formdelFileName function of /goform/delFileName, where input length validation leads to a buffer overflow. Attack can be launched remotely, and the exploit has been publicly disclosed (PROOF-OF-CONCEPT). Several sou...