Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-5152

Tenda CH22 createFileName formCreateFileName stack-based overflow

Description

A vulnerability was detected in Tenda CH22 1.0.0.1. Impacted is the function formCreateFileName of the file /goform/createFileName. Performing a manipulation of the argument fileNameMit results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenda CH22

  • 1.0.0.1affected

References