The vulnerability of the formexeCommand() function in the Tenda W3 wireless access point software allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formexeCommand function in the Tenda W3 wireless access point software lies in the fact that the operation exceeds the buffer limits in memory when processing the cmdinput parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality,...

VulnCheck KEV: CVE-2026-78141

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

The vulnerability of the formexeCommand() function in the Tenda CH22 router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formexeCommand function in the Tenda CH22 router’s microprogramming system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

EUVD-2026-64666

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2026-78141

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2026-78141 Tenda CH22 exeCommand formexeCommand command injection

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2026-78141

The Tenda CH22 router (version 1.0.0.1) contains a command injection vulnerability within the formexeCommand function of the /goform/exeCommand file. The root cause is the improper neutralization of special elements used in a command, specifically via the manipulation of the cmdinput argument. Th...

CVE-2026-78141: Improper Neutralization of Special Elements used in a Command

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

PT-2026-79783

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

The vulnerability of the formexeCommand()/goform/exeCommand function in the Tenda i3 wireless access point software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formexeCommand/goform/exeCommand function in the Tenda i3 wireless access point software is related to the operation that goes beyond the buffer in memory when processing the cmdinput parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

CVE-2026-3974 Tenda W3 HTTP exeCommand formexeCommand stack-based overflow

A vulnerability was identified in Tenda W3 1.0.0.32204. This vulnerability affects the function formexeCommand of the file /goform/exeCommand of the component HTTP Handler. Such manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be performed from remote. Th...

EUVD-2026-11513

A vulnerability was identified in Tenda W3 1.0.0.32204. This vulnerability affects the function formexeCommand of the file /goform/exeCommand of the component HTTP Handler. Such manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be performed from remote. Th...

CVE-2026-3974

CVE-2026-3974 affects Tenda W3 1.0.0.3(2204). The vulnerability is in the HTTP Handler function formexeCommand of the /goform/exeCommand component, where manipulation of the cmdinput argument causes a stack-based buffer overflow. This can potentially be exploited remotely, and an exploit is publi...

CVE-2026-3974: Stack-based Buffer Overflow

A vulnerability was identified in Tenda W3 1.0.0.32204. This vulnerability affects the function formexeCommand of the file /goform/exeCommand of the component HTTP Handler. Such manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be performed from remote. Th...

PT-2026-24914

A vulnerability was identified in Tenda W3 1.0.0.32204. This vulnerability affects the function formexeCommand of the file /goform/exeCommand of the component HTTP Handler. Such manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack may be performed from remote. Th...

EUVD-2026-10296

A vulnerability was determined in Tenda i3 1.0.0.62204. Affected by this issue is the function formexeCommand of the file /goform/exeCommand. Executing a manipulation of the argument cmdinput can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been...

CVE-2026-3802

A vulnerability was determined in Tenda i3 1.0.0.62204. Affected by this issue is the function formexeCommand of the file /goform/exeCommand. Executing a manipulation of the argument cmdinput can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been...

CVE-2026-3802

CVE-2026-3802 affects Tenda i3 firmware 1.0.0.6(2204). The vulnerable element is the function formexeCommand in the file /goform/exeCommand . Manipulating the argument cmdinput can cause a stack-based buffer overflow. The issue is exploitable remotely over the network, with exploit code publicly ...

CVE-2026-3802 Tenda i3 exeCommand formexeCommand stack-based overflow

A vulnerability was determined in Tenda i3 1.0.0.62204. Affected by this issue is the function formexeCommand of the file /goform/exeCommand. Executing a manipulation of the argument cmdinput can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been...

CVE-2026-3802: Stack-based Buffer Overflow

A vulnerability was determined in Tenda i3 1.0.0.62204. Affected by this issue is the function formexeCommand of the file /goform/exeCommand. Executing a manipulation of the argument cmdinput can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been...