CVE-2026-5204 in Tenda CH22

Сводка (Английский)

A vulnerability was determined in Tenda CH22 1.0.0.1. Affected is the function formWebTypeLibrary of the file /goform/webtypelibrary of the component Parameter Handler. This manipulation of the argument webSiteId causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Раскрытие

31.03.2026

Записи

VulDB provides additional information and datapoints for this CVE:

ИД	Уязвимость	CWE	Экс	Кон	CVE
354332	Tenda CH22 Parameter webtypelibrary formWebTypeLibrary повреждение памяти	121	Доказательство концепции	Не определено	CVE-2026-5204