CVE-2026-5605: Tenda CH22 WrlExtraSet formWrlExtraSet stack-based overflow
A weakness has been identified in Tenda CH22 1.0.0.1. This affects the function formWrlExtraSet of the file /goform/WrlExtraSet. Executing a manipulation of the argument GO can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5605?
CVE-2026-5605 is considered a critical vulnerability due to the potential for stack-based buffer overflow that may allow remote code execution.
How do I fix CVE-2026-5605?
To mitigate CVE-2026-5605, update the Tenda CH22 firmware to the latest version that addresses this vulnerability.
What can attackers do with CVE-2026-5605?
Attackers can exploit CVE-2026-5605 to execute arbitrary code on the affected Tenda CH22 device through specially crafted requests.
Which devices are affected by CVE-2026-5605?
CVE-2026-5605 affects Tenda CH22 devices running firmware version 1.0.0.1.
Is CVE-2026-5605 easy to exploit?
Yes, CVE-2026-5605 can be exploited remotely with minimal effort, making it a significant security concern.