PT-2026-57617 · Tenda · Ch22

Ysnysn0121 · Published 2026-07-12 · Updated 2026-07-13 · CVE-2026-15543

Mitre

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A vulnerability was found in Tenda CH22 1.0.0.1. This impacts the function formCertListInfo of the file /goform/CertListInfo. The manipulation of the argument Name results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

CVE-2026-15543

Affected Products

Ch22

References · 7

• 🔥 https://candle-throne-f75.notion.site/Tenda-CH22-formCertListInfo-377df0aa11858088aabaeb0f5e1909c9 · Exploit
• https://vuldb.com/cve/CVE-2026-15543 · Note
• https://twitter.com/vuldb/status/2076372974593306825 · Twitter Post
• https://vuldb.com/vuln/377893/cti · Note
• https://tenda.com.cn · Note
• https://vuldb.com/submit/855077 · Note
• https://vuldb.com/vuln/377893 · Note