The vulnerability of the formeditFileName() function in the Tenda CH22 router’s software allows a hacker to execute arbitrary code.

The vulnerability of the formeditFileName function in the Tenda CH22 router’s software lies in the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-78063 Tenda CH22 editFileName formeditFileName command injection

A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument editNameMit results in command injection. The attack can be launched remotely. The exploit has been released to the...

CVE-2026-78063

A command injection vulnerability exists in Tenda CH22 firmware version 1.0.0.1 . The flaw is in the function formeditFileName within the file /goform/editFileName , where manipulation of the editNameMit argument allows an authenticated remote attacker to inject and execute arbitrary commands. Th...

EUVD-2026-64632

A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument editNameMit results in command injection. The attack can be launched remotely. The exploit has been released to the...

Tenda CH22 /goform/editFileName File Buffer Overflow Vulnerability

The Tenda CH22 is an enterprise-grade wireless router from the Tenda brand. Tenda CH22 suffers from a buffer overflow vulnerability, which originates from the failure of the function formeditFileName in the file /goform/editFileName to correctly validate the length and size of the input data, whi...

CVE-2025-9007

A vulnerability has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function formeditFileName of the file /goform/editFileName. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-9007 Tenda CH22 editFileName formeditFileName buffer overflow

A vulnerability has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function formeditFileName of the file /goform/editFileName. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-9007 Tenda CH22 editFileName formeditFileName buffer overflow

A vulnerability has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function formeditFileName of the file /goform/editFileName. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-9007: Buffer Copy without Checking Size of Input

A vulnerability has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function formeditFileName of the file /goform/editFileName. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

PT-2025-33438 · Tenda · Tenda Ch22

Name of the Vulnerable Software and Affected Versions: Tenda CH22 version 1.0.0.1 Description: A buffer overflow vulnerability exists in the formeditFileName function within the /goform/editFileName file. The issue can be exploited remotely. The exploit for this vulnerability has been publicly...