CVE-2026-5152 in Tenda CH22
Summary
A vulnerability was detected in Tenda CH22 1.0.0.1. Impacted is the function formCreateFileName of the file /goform/createFileName. Performing a manipulation of the argument fileNameMit results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.
Disclosure
03/31/2026
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 354184 | Tenda CH22 createFileName formCreateFileName stack-based overflow | 121 | Proof-of-Concept | Not defined | CVE-2026-5152 |