PT-2026-29115 · Tenda · Tenda Ch22

Ltzhust2

·

CVE-2026-5156

·

Publicado

2026-03-14

·

Atualizado

2026-03-31

CVSS v2.0

9.0

Alta

VetorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Tenda CH22 version 1.0.0.1
Description A flaw exists in the Parameter Handler component of Tenda CH22 version 1.0.0.1, specifically within the formQuickIndex function located in the /goform/QuickIndex file. Manipulation of the mit linktype argument can lead to a stack-based buffer overflow. This issue is remotely exploitable and has been publicly disclosed.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Buffer Overflow

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-121CWE-119CWE-787

Identificadores relacionados

BDU:2026-04337
CVE-2026-5156

Produtos afetados

Tenda Ch22