CVE-2026-5152 in Tenda CH22
Zusammenfassung (Englisch)
A vulnerability was detected in Tenda CH22 1.0.0.1. Impacted is the function formCreateFileName of the file /goform/createFileName. Performing a manipulation of the argument fileNameMit results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.
Veröffentlichung
31.03.2026
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 354184 | Tenda CH22 createFileName formCreateFileName Pufferüberlauf | 121 | Proof-of-Concept | Nicht definiert | CVE-2026-5152 |