EUVD-2025-26311

A vulnerability was determined in Tenda CH22 1.0.0.1. Affected by this issue is the function fromIpsecitem of the file /goform/IPSECsave of the component httpd. Executing manipulation of the argument ipsecno can lead to stack-based buffer overflow. The attack may be performed from remote...

EUVD-2025-26372

A vulnerability was identified in Tenda CH22 1.0.0.1. This issue affects the function formSetSambaConf of the file /goform/SetSambaConf. The manipulation of the argument sambauserNameSda leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available an...

Tenda CH22 Parameter Handler Component Use-After-Free

The vulnerability of the Parameter Handler component in the fromAdvSetWan function of the /goform/AdvSetWan microprogramming system Tenda CH22 is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

Tenda CH22 Router Buffer Overflow

The vulnerability of the formWebTypeLibrary function in the /goform/webtypelibrary file of the Parameter Handler component of the Tenda CH22 router microprogramming system is related to the issue of the operation going beyond the buffer boundaries during the processing of the wpapskcrypto...

Tenda CH22 Router DoS

The vulnerability of the formCreateFileName function in the Tenda CH22 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Tenda CH22 FormWriteFacMac Arbitrary Command Execution

The vulnerability of the FormWriteFacMac function in the /goform/WriteFacMac file of the Tenda CH22 microprogramming system is related to the failure to take measures to neutralize special elements during the processing of the mac parameter. Exploiting this vulnerability can allow an attacker to...

Tenda CH22 Parameter Handler Heap Buffer Overflow

The vulnerability of the Parameter Handler component in the fromSetCfm function of the /goform/setcfm microprogramming system Tenda CH22 is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

Tenda CH22 Router Code Execution

The vulnerability of the formWrlExtraSet /goform/WrlExtraSet function in the Tenda CH22 router microprogramming system lies in the reading of data outside the buffer in memory during the processing of the GO parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or...

VulnCheck KEV: CVE-2026-5153

A flaw has been found in Tenda CH22 1.0.0.1. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. Executing a manipulation of the argument mac can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used...

VulnCheck KEV: CVE-2026-78141

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

Tenda CH22 Router Code Execution

The vulnerability of the formeditFileName function in the Tenda CH22 router’s software lies in the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Tenda CH22 Router Command Execution

The vulnerability of the formexeCommand function in the Tenda CH22 router’s microprogramming system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Tenda CH22 Router FormcreateFileName Arbitrary Command Execution

The vulnerability of the formcreateFileName function in the /goform/formcreateFileName file of the Tenda CH22 router microprogramming system is related to the failure to take measures to eliminate special elements in the output data. Exploiting this vulnerability may allow a remote attacker to...

EUVD-2026-64666

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2026-78141

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2026-78141 Tenda CH22 exeCommand formexeCommand command injection

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2026-78141 Tenda CH22 exeCommand formexeCommand command injection

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2026-78141

The Tenda CH22 router (version 1.0.0.1) contains a command injection vulnerability within the formexeCommand function of the /goform/exeCommand file. The root cause is the improper neutralization of special elements used in a command, specifically via the manipulation of the cmdinput argument. Th...

CVE-2026-78063

A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument editNameMit results in command injection. The attack can be launched remotely. The exploit has been released to the...

CVE-2026-78063 Tenda CH22 editFileName formeditFileName command injection

A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument editNameMit results in command injection. The attack can be launched remotely. The exploit has been released to the...