Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A weakness has been identified in Tenda CH22 1.0.0.1. This affects the function formWrlExtraSet of the file /goform/WrlExtraSet. Executing a manipulation of the argument GO can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-04-05 | 2 | Disclosure1Exploit1 |
| 2026-04-06 | 2 | Disclosure2 |
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-5605 - Tenda CH22 WrlExtraSet formWrlExtraSet stack-based overflow Intel Report: https://ift.tt/NYE9Fel
Post summary
A new CVE (2026-5605) for a stack-based overflow in Tenda CH22 is announced via an alert, with no PoC, exploit, patch, or active exploitation indicated.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-5605 - Tenda CH22 WrlExtraSet formWrlExtraSet stack-based overflow Intel Report: https://ift.tt/DZxETj9
Post summary
A newly disclosed stack‑based overflow vulnerability (CVE-2026-5605) affecting the Tenda CH22 router has been reported, with an associated Intel report link provided.
[CVE-2026-5605: HIGH] Warning: Vulnerability found in Tenda CH22 1.0.0.1 allows for remote stack-based buffer overflow. Exploit released publicly. Stay vigilant against cyber threats!#cve,CVE-2026-5605,#cybersecurity https://cvefind.com/CVE-2026-5605
Post summary
CVE-2026-5605 exposes a remote stack-based buffer overflow in Tenda CH22 firmware, with a publicly released exploit, though detailed exploit code or evidence of active wild exploitation is not provided.
A new vulnerability with increased severity was disclosed for Tenda CH22 (CVE-2026-5605) https://vuldb.com/vuln/355397
Post summary
The brief mention announces that a new vulnerability, CVE-2026-5605, was disclosed for the Tenda CH22 firmware, providing a link for additional details but giving no technical specifics or evidence of exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tenda | ch22 | - | - | - |
| OS | tenda | ch22_firmware | 1.0.0.1 | - | - |