Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been found in Tenda CH22 1.0.0.1/1.If. The impacted element is the function fromSetCfm of the file /goform/setcfm of the component Parameter Handler. The manipulation of the argument funcname leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-03-30 | 2 | Disclosure2 |
| 2026-03-31 | 1 | Disclosure1 |
CVE-2026-5154 A vulnerability has been found in Tenda CH22 1.0.0.1/1.If. The impacted element is the function fromSetCfm of the file /goform/setcfm of the component Parameter Handler… https://www.cve.org/CVERecord?id=CVE-2026-5154
Post summary
The post merely reports that a CVE exists in a specific function of a Tenda router, with no PoC, exploit, or patch information.
[CVE-2026-5154: HIGH] Critical vulnerability found in Tenda CH22 1.0.0.1/1.If allows remote attackers to trigger a stack-based buffer overflow. Immediate action is advised.#cve,CVE-2026-5154,#cybersecurity https://cvefind.com/CVE-2026-5154
Post summary
A critical stack‑based buffer overflow vulnerability (CVE‑2026‑5154) has been identified in the Tenda CH22 firmware, and users are urged to take immediate action.
There is a new vulnerability with elevated criticality in Tenda CH22 (CVE-2026-5154) https://vuldb.com/vuln/354186
Post summary
A new high‑severity vulnerability (CVE-2026-5154) affecting the Tenda CH22 has been announced, with a reference link to a vulnerability database entry.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | ch22 | - | - | - |
| OS | tenda | ch22_firmware | 1.0.0.1 | - | - |