CVE-2026-5155

Name of the Vulnerable Software and Affected Versions Tenda CH22 version 1.0.0.1

Description A flaw exists in Tenda CH22 version 1.0.0.1 within the Parameter Handler component. Specifically, the fromAdvSetWan function in the /goform/AdvSetWan file is susceptible to a stack-based buffer overflow. This occurs through manipulation of the wanmode argument, allowing for remote exploitation. A public exploit is available.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.