ZeroDay Findings
Sign inSign up

Findings

CVE-2026-5155

A vulnerability was found in Tenda CH22 1.0.0.1.

Published Mar 30, 2026 · updated Jun 17, 2026 · tenda ch22 firmware

A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component Parameter Handler. The manipulation of the argument wanmode results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 30, 2026 · NIST NVD

    Detected

    A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component Parameter Handler. The manipulation of the argument wanmode results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.

  2. Jun 17, 2026 · NIST NVD

    Updated

    A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component Parameter Handler. The manipulation of the argument wanmode results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used.

Affected

  • cpe tenda/ch22 firmware1.0.0.1

Sources

  • CVE.orgVulnerability recordCVE-2026-5155

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-5155

    A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component Parameter Handler. The manipulation of the argument wanmode results in stack-based buffer overflow. The attack can be executed remotely. The exp

    nvd.nist.gov

References