Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in Tenda CH22 1.0.0.1. This impacts the function formQuickIndex of the file /goform/QuickIndex of the component Parameter Handler. This manipulation of the argument mit_linktype causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-03-30 | 1 | Disclosure1 |
| 2026-03-31 | 4 | Disclosure3Dislusion1 |
CVE‑2026‑5156 – A stack‑based buffer overflow in Tenda CH22 routers lets remote attackers send a carefully crafted `Host‑name`‑like parameter and hijack the router’s OS with a single packet. https://nvd.nist.gov/vuln/detail/CVE-2026-5156
Post summary
The text announces a new stack‑based buffer overflow in Tenda CH22 routers, detailing how a maliciously crafted hostname parameter can hijack the device’s OS with a single packet.
CVE-2026-5156 A vulnerability was determined in Tenda CH22 1.0.0.1. This impacts the function formQuickIndex of the file /goform/QuickIndex of the component Parameter Handler. This m… https://www.cve.org/CVERecord?id=CVE-2026-5156
Post summary
CVE-2026-5156 is a newly identified vulnerability affecting Tenda CH22 1.0.0.1 via its formQuickIndex function in the /goform/QuickIndex file of the Parameter Handler component.
⚡ New CVE Alert: CVE-2026-5156 📊 Severity: 8.8 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-5156 #CVE-2026-5156 #CVE #High #CyberSecurity #InfoSec https://t.co/kWt57zlvwN
Post summary
The tweet announces a new high‑severity CVE with very little detail, providing only a severity score and a generic product impact statement.
[CVE-2026-5156: HIGH] Critical vulnerability identified in Tenda CH22 1.0.0.1! Stack-based buffer overflow through manipulation of argument mit_linktype in /goform/QuickIndex allows remote attacks. Public expl...#cve,CVE-2026-5156,#cybersecurity https://cvefind.com/CVE-2026-5156
Post summary
The tweet announces a high‑severity stack‑based buffer overflow in Tenda CH22, detailing the vulnerable parameter and input vector, but provides no PoC, exploit code, or evidence of active exploitation.
A severe vulnerability was disclosed for Tenda CH22 (CVE-2026-5156) https://vuldb.com/vuln/354188
Post summary
The post announces the discovery of CVE-2026-5156 affecting Tenda CH22, with a link to a vulnerability database entry, but lacks further technical or exploit details.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | ch22 | - | - | - |
| OS | tenda | ch22_firmware | 1.0.0.1 | - | - |