CVE-2026-5152 in CH22

Resumen (Inglés)

A vulnerability was detected in Tenda CH22 1.0.0.1. Impacted is the function formCreateFileName of the file /goform/createFileName. Performing a manipulation of the argument fileNameMit results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Divulgación

2026-03-31

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
354184	Tenda CH22 createFileName formCreateFileName desbordamiento de búfer	121	Prueba de concepto	No está definido	CVE-2026-5152

Fuentes

• MITRE
• NVD
• CVE Details