Tenda Ch22 vulnerabilities

CVE-2025-11418 [CRITICAL] CWE-119 CVE-2025-11418: A security vulnerability has been detected in Tenda CH22 up to 1.0.0.1. This issue affects the funct A security vulnerability has been detected in Tenda CH22 up to 1.0.0.1. This issue affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component HTTP Request Handler. The manipulation of the argument mit_ssid_index leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed

CVE-2026-5204 [HIGH] CWE-119 CVE-2026-5204: A vulnerability was determined in Tenda CH22 1.0.0.1. Affected is the function formWebTypeLibrary of A vulnerability was determined in Tenda CH22 1.0.0.1. Affected is the function formWebTypeLibrary of the file /goform/webtypelibrary of the component Parameter Handler. This manipulation of the argument webSiteId causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

CVE-2025-12232 [CRITICAL] CWE-119 CVE-2025-12232: A vulnerability was detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function f A vulnerability was detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromSafeClientFilter of the file /goform/SafeClientFilter. Performing a manipulation of the argument page results in buffer overflow. The attack can be initiated remotely. The exploit is now public and may be used.

CVE-2025-8180 [HIGH] CWE-119 CVE-2025-8180: A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.1. Affected by A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function formdeleteUserName of the file /goform/deleteUserName. The manipulation of the argument old_account leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2026-5153 [HIGH] CWE-74 CVE-2026-5153: A flaw has been found in Tenda CH22 1.0.0.1. The affected element is the function FormWriteFacMac of A flaw has been found in Tenda CH22 1.0.0.1. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. Executing a manipulation of the argument mac can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used.

CVE-2025-12233 [HIGH] CWE-119 CVE-2025-12233: A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilte A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.

CVE-2025-5619 [CRITICAL] CWE-119 CVE-2025-5619: A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.1. This issue A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.1. This issue affects the function formaddUserName of the file /goform/addUserName. The manipulation of the argument Password leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2026-5155 [HIGH] CWE-119 CVE-2026-5155: A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function fromAdvSetWan of the file A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component Parameter Handler. The manipulation of the argument wanmode results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.

CVE-2026-5152 [HIGH] CWE-119 CVE-2026-5152: A vulnerability was detected in Tenda CH22 1.0.0.1. Impacted is the function formCreateFileName of t A vulnerability was detected in Tenda CH22 1.0.0.1. Impacted is the function formCreateFileName of the file /goform/createFileName. Performing a manipulation of the argument fileNameMit results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.

CVE-2026-5605 [HIGH] CWE-119 CVE-2026-5605: A weakness has been identified in Tenda CH22 1.0.0.1. This affects the function formWrlExtraSet of t A weakness has been identified in Tenda CH22 1.0.0.1. This affects the function formWrlExtraSet of the file /goform/WrlExtraSet. Executing a manipulation of the argument GO can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

CVE-2025-12236 [HIGH] CWE-119 CVE-2025-12236: A vulnerability was determined in Tenda CH22 1.0.0.1. This issue affects the function fromDhcpListCl A vulnerability was determined in Tenda CH22 1.0.0.1. This issue affects the function fromDhcpListClient of the file /goform/DhcpListClient. This manipulation of the argument page causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.

CVE-2026-5154 [HIGH] CWE-119 CVE-2026-5154: A vulnerability has been found in Tenda CH22 1.0.0.1/1.If. The impacted element is the function from A vulnerability has been found in Tenda CH22 1.0.0.1/1.If. The impacted element is the function fromSetCfm of the file /goform/setcfm of the component Parameter Handler. The manipulation of the argument funcname leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be us

CVE-2026-5604 [HIGH] CWE-119 CVE-2026-5604: A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function form A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formCertLocalPrecreate of the file /goform/CertLocalPrecreate of the component Parameter Handler. Performing a manipulation of the argument standard results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been re

CVE-2026-5156 [HIGH] CWE-119 CVE-2026-5156: A vulnerability was determined in Tenda CH22 1.0.0.1. This impacts the function formQuickIndex of th A vulnerability was determined in Tenda CH22 1.0.0.1. This impacts the function formQuickIndex of the file /goform/QuickIndex of the component Parameter Handler. This manipulation of the argument mit_linktype causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized

CVE-2025-5685 [CRITICAL] CWE-119 CVE-2025-5685: A vulnerability, which was classified as critical, was found in Tenda CH22 1.0.0.1. This affects the A vulnerability, which was classified as critical, was found in Tenda CH22 1.0.0.1. This affects the function formNatlimit of the file /goform/Natlimit. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-13400 [CRITICAL] CWE-119 CVE-2025-13400: A vulnerability was detected in Tenda CH22 1.0.0.1. Affected is the function formWrlExtraGet of the A vulnerability was detected in Tenda CH22 1.0.0.1. Affected is the function formWrlExtraGet of the file /goform/WrlExtraGet. Performing a manipulation of the argument chkHz results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used.

CVE-2026-5962 [CRITICAL] CWE-22 CVE-2026-5962: A vulnerability was detected in Tenda CH22 1.0.0.6(468). This issue affects the function R7WebsSecur A vulnerability was detected in Tenda CH22 1.0.0.6(468). This issue affects the function R7WebsSecurityHandlerfunction of the component httpd. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used.

CVE-2025-12234 [HIGH] CWE-119 CVE-2025-12234: A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function fromSafeMacFilter of A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the argument page leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-12273 [CRITICAL] CWE-119 CVE-2025-12273: A weakness has been identified in Tenda CH22 1.0.0.1. Affected is the function fromwebExcptypemanFil A weakness has been identified in Tenda CH22 1.0.0.1. Affected is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. Executing a manipulation of the argument page can lead to buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.

CVE-2025-12271 [CRITICAL] CWE-119 CVE-2025-12271: A vulnerability was identified in Tenda CH22 1.0.0.1. This affects the function fromRouteStatic of t A vulnerability was identified in Tenda CH22 1.0.0.1. This affects the function fromRouteStatic of the file /goform/RouteStatic. Such manipulation of the argument page leads to buffer overflow. The attack can be launched remotely. The exploit is publicly available and might be used.