Lucene search
+L

8 matches found

BDU FSTEC
BDU FSTEC
•added 2026/08/11 12:00 a.m.•5 views

The vulnerability of the formCertListInfo() function in the /goform/CertListInfo file of the Tenda CH22 router microprogramming system, which allows a hacker to execute arbitrary commands.

The vulnerability of the formCertListInfo function in the /goform/CertListInfo file of the Tenda CH22 router microsystem is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

9CVSS8.6AI score0.0273EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/08/09 10:00 a.m.•9 views

CVE-2026-19346 Tenda CH22 CertListInfo formCertListInfo command injection

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may b...

9CVSS7.7AI score0.0273EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/09 12:00 a.m.•1 views

CVE-2026-19346: Improper Neutralization of Special Elements used in a Command

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may b...

9CVSS7.7AI score0.0273EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/07/14 12:00 a.m.•13 views

The vulnerability of the formCertListInfo() function in the Tenda CH22 router software allows a hacker to execute arbitrary code.

The vulnerability of the formCertListInfo function in the Tenda CH22 router’s microprogramming software is related to the execution of an operation outside the buffer in memory when processing the Name parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by...

9CVSS7.5AI score0.00854EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2026/07/13 8:16 a.m.•35 views

CVE-2026-15543

A vulnerability was found in Tenda CH22 1.0.0.1. This impacts the function formCertListInfo of the file /goform/CertListInfo. The manipulation of the argument Name results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used...

9CVSS0.00854EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/07/13 7:15 a.m.•11 views

CVE-2026-15543 Tenda CH22 CertListInfo formCertListInfo buffer overflow

A vulnerability was found in Tenda CH22 1.0.0.1. This impacts the function formCertListInfo of the file /goform/CertListInfo. The manipulation of the argument Name results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used...

9CVSS8.2AI score0.00854EPSS
SaveExploits0References6
CVE
CVE
•added 2026/07/13 7:15 a.m.•40 views

CVE-2026-15543

The CVE-2026-15543 entry concerns Tenda CH22 firmware 1.0.0.1. The vulnerability affects the function formCertListInfo in /goform/CertListInfo, where manipulating the Name argument triggers a buffer overflow. This is a remote-exploit scenario, with public exploits cited. The available sources pro...

9CVSS8.2AI score0.00854EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/13 12:00 a.m.•2 views

CVE-2026-15543: Buffer Copy without Checking Size of Input

A vulnerability was found in Tenda CH22 1.0.0.1. This impacts the function formCertListInfo of the file /goform/CertListInfo. The manipulation of the argument Name results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used...

9CVSS6.2AI score0.00854EPSS
SaveExploits0References3
Rows per page
Query Builder