Vulnerabilities CVE-2026-78063

CVE-2026-78063

Medium

Open

TLP:CLEAR

Tenda CH22 editFileName formeditFileName command injection

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument editNameMit results in command injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

Details

CVSS Score: 5.3
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P
Confidence: 90%
Published: Aug 23, 2026
Last Modified: Aug 23, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.