CVE-2022-35555: Tenda w6 Firmware

Critical severity, CVSS 9.8. EPSS: 26.3% chance of exploitation in the next 30 days.

A command injection vulnerability exists in /goform/exeCommand in Tenda W6 V1.0.0.9(4122), which allows attackers to construct cmdinput parameters for arbitrary command execution.

Affected products

• Tenda w6 Firmware: version 1.0.0.9(4122) only

Published 2022-08-12. Last modified 2026-06-17.