CVE-2026-78063 Tenda CH22 editFileName formeditFileName command injection

A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument editNameMit results in command injection. The attack can be launched remotely. The exploit has been released to the...

CVE-2026-78063: Improper Neutralization of Special Elements used in a Command

A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument editNameMit results in command injection. The attack can be launched remotely. The exploit has been released to the...

PT-2026-79758

A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument editNameMit results in command injection. The attack can be launched remotely. The exploit has been released to the...

EUVD-2025-24982

Malicious code in bioql PyPI...

CVE-2025-9007

A vulnerability has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function formeditFileName of the file /goform/editFileName. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-9007

A vulnerability has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function formeditFileName of the file /goform/editFileName. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-9007 Tenda CH22 editFileName formeditFileName buffer overflow

A vulnerability has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function formeditFileName of the file /goform/editFileName. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

Tenda CH22 安全漏洞

The Tenda CH22 is an enterprise-grade wireless router from the Tenda brand. Tenda CH22 suffers from a buffer overflow vulnerability, which originates from the failure of the function formeditFileName in the file /goform/editFileName to correctly validate the length and size of the input data, whi...

CVE-2025-9007: Buffer Copy without Checking Size of Input

A vulnerability has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function formeditFileName of the file /goform/editFileName. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

PT-2025-33438

Name of the Vulnerable Software and Affected Versions: Tenda CH22 version 1.0.0.1 Description: A buffer overflow vulnerability exists in the formeditFileName function within the /goform/editFileName file. The issue can be exploited remotely. The exploit for this vulnerability has been publicly...

CVE-2022-45507

CVE-2022-45507 affects Tenda W30E v1.0.1.25(633): a stack overflow is triggered via the editNameMit parameter in the /goform/editFileName API endpoint. CVSSv3.1 base score 7.5 (HIGH); attack vector NETWORK, no user interaction required. Connected sources indicate potential PoC exploitability (POC...

CVE-2022-45507: Out-of-bounds Write

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the editNameMit parameter at /goform/editFileName...

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow contained in the editNameMit parameter via /goform/editFileName...