CVE-2026-19346: Tenda CH22

High severity, CVSS 8.8. EPSS: 2.7% chance of exploitation in the next 30 days.

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Affected products

• Tenda CH22: version 1.0.0.1 only

Published 2026-08-09. Last modified 2026-08-12.