PT-2026-30460 · Tenda · Ch22

Ltzhuster · Published 2026-04-05 · Updated 2026-04-06 · CVE-2026-5605

NVD

CVSS v2.0

9.0

High

AV:N/AC:L/Au:S/C:C/I:C/A:C

A weakness has been identified in Tenda CH22 1.0.0.1. This affects the function formWrlExtraSet of the file /goform/WrlExtraSet. Executing a manipulation of the argument GO can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

Exploit

Fix

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

CVE-2026-5605

Affected Products

Ch22

References · 7

• 🔥 https://github.com/Litengzheng/vuldb_new/blob/main/CH22/vul_54/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5605 · Security Note
• https://twitter.com/vuldb/status/2040807448941125792 · Twitter Post
• https://vuldb.com/vuln/355397 · Note
• https://vuldb.com/submit/785052 · Note
• https://vuldb.com/vuln/355397/cti · Note
• https://tenda.com.cn · Note