Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A vulnerability was detected in Tenda CH22 1.0.0.1. Impacted is the function formCreateFileName of the file /goform/createFileName. Performing a manipulation of the argument fileNameMit results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-03-30 | 2 | General1PoC1 |
| 2026-03-31 | 1 | Disclosure1 |
CVE-2026-5152 A vulnerability was detected in Tenda CH22 1.0.0.1. Impacted is the function formCreateFileName of the file /goform/createFileName. Performing a manipulation of the arg… https://www.cve.org/CVERecord?id=CVE-2026-5152
Post summary
The statement cites CVE‑2026‑5152, outlining a vulnerability in Tenda CH22’s `formCreateFileName` function but provides no PoC, exploit, or patch details.
[CVE-2026-5152: HIGH] Critical vulnerability found in Tenda CH22 1.0.0.1 allowing remote attacks via stack-based buffer overflow in formCreateFileName function. Public exploit available.#cve,CVE-2026-5152,#cybersecurity https://cvefind.com/CVE-2026-5152
Post summary
A critical stack-based buffer overflow (CVE‑2026‑5152) was discovered in Tenda CH22 firmware 1.0.0.1, with a publicly available exploit referenced, but no patches or mitigation steps are noted.
The severity is increased for this new vulnerability affecting Tenda CH22 (CVE-2026-5152) https://vuldb.com/vuln/354184
Post summary
The statement notes an increased severity for CVE-2026-5152 affecting Tenda CH22 but offers no additional technical or mitigation information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | ch22 | - | - | - |
| OS | tenda | ch22_firmware | 1.0.0.1 | - | - |