Exploitation observed; activity peaked at 5 mentions and remains active
Recommended action window: Immediate (within 24h)
NVD description
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formCertLocalPrecreate of the file /goform/CertLocalPrecreate of the component Parameter Handler. Performing a manipulation of the argument standard results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Priority
LOW
Exploitation
ACTIVE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-04-05 | 5 | Active Exploitation1Disclosure3General1 |
| 2026-04-06 | 2 | Disclosure2 |
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-5604 - Tenda CH22 Parameter CertLocalPrecreate formCertLocalPrecreate stack-based overflow Intel Report: https://ift.tt/bWNmgvL
Post summary
The alert announces CVE-2026-5604, a stack‑based overflow in Tenda CH22’s CertLocalPrecreate parameter, providing technical details but no PoC or evidence of exploitation.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-5604 - Tenda CH22 Parameter CertLocalPrecreate formCertLocalPrecreate stack-based overflow Intel Report: https://ift.tt/VsyXAla
Post summary
The tweet announces a stack-based overflow vulnerability (CVE-2026-5604) in the Tenda CH22 device, referencing an Intel report for further details.
🚨*CVE* CVE-2026-5604 A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formCertLocalPrecreate of the file /goform/CertLocalPrecreate of the com… https://www.cve.org/CVERecord?id=CVE-2026-5604 ----- Traducción: CVE-2026-5604 Se … http://infoflow.cloud`
Post summary
The post announces the discovery of CVE-2026-5604 in Tenda CH22 firmware, identifying the affected function formCertLocalPrecreate.
CVE-2026-5604 A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formCertLocalPrecreate of the file /goform/CertLocalPrecreate of the com… https://www.cve.org/CVERecord?id=CVE-2026-5604
Post summary
The text announces the discovery of CVE-2026-5604 in the Tenda CH22 firmware, identifying the affected function and file, but provides no PoC, exploit, or patch information.
```json { "x": "🚨 CVE-2026-5604 | CVSS 8.8 HIGH\n\nStack-based buffer overflow in Tenda CH22 1[.]0[.]0[.]1 router. Publicly exploited.
Post summary
CVE-2026-5604, a stack-based buffer overflow in Tenda CH22 routers, is actively exploited in the wild, though no PoC or exploit code is provided.
[CVE-2026-5604: HIGH] Critical security flaw found in Tenda CH22 1.0.0.1! Vulnerability in formCertLocalPrecreate function may lead to remote stack-based buffer overflow attack. Exploit now public. #cybersecurity#cve,CVE-2026-5604,#cybersecurity https://cvefind.com/CVE-2026-5604
Post summary
CVE-2026-5604 reveals a remote stack‑based buffer overflow in Tenda CH22's formCertLocalPrecreate function; the exploit is reported as public, but no patch, detailed PoC, or active exploitation evidence is provided.
There is a new vulnerability with elevated criticality in Tenda CH22 (CVE-2026-5604) https://vuldb.com/vuln/355396
Post summary
A new critical vulnerability (CVE-2026-5604) in Tenda CH22 has been announced, but no technical, exploit, or patch details are provided.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | ch22 | - | - | - |
| OS | tenda | ch22_firmware | 1.0.0.1 | - | - |