CVE-2026-5153: Tenda CH22 WriteFacMac FormWriteFacMac command injection
A flaw has been found in Tenda CH22 1.0.0.1. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. Executing a manipulation of the argument mac can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5153?
CVE-2026-5153 is classified as a high-severity vulnerability due to its potential for remote command injection.
How do I fix CVE-2026-5153?
To mitigate CVE-2026-5153, update the Tenda CH22 to the latest firmware version provided by the manufacturer.
What type of vulnerability is CVE-2026-5153?
CVE-2026-5153 is a command injection vulnerability affecting the WriteFacMac function of Tenda CH22.
Who is affected by CVE-2026-5153?
CVE-2026-5153 affects users of the Tenda CH22 running version 1.0.0.1.
Can CVE-2026-5153 be exploited remotely?
Yes, CVE-2026-5153 can be exploited remotely, allowing attackers to execute arbitrary commands on the device.