CVE-2026-19346 in CH22

Prediction

by VulDB Data Team • 08/08/2026

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-387182
• CPE: ready
• CWE: CWE-77 (confirmed)
• Exploit: Download
• CVSS: 8.8 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low
• Sector: Education, Homeoffice, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-19346
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-19346
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-19346/