Tenda CH22 Firmware vulnerabilities

39 CVEs affecting Tenda CH22 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-5962, published 2026-04-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-8180, published 2025-07-26. High severity, CVSS 8.8. EPSS: 10.2% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function formdeleteUserName of the file /goform/deleteUserName. The manipulation…
CVE-2025-11418, published 2025-10-08. Critical severity, CVSS 9.8. EPSS: 6.7% chance of exploitation in the next 30 days. A security vulnerability has been detected in Tenda CH22 up to 1.0.0.1. This issue affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component HTTP Request Handler. The…
CVE-2026-5153, published 2026-03-30. High severity, CVSS 8.8. EPSS: 6.5% chance of exploitation in the next 30 days. A flaw has been found in Tenda CH22 1.0.0.1. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. Executing a manipulation of the argument mac can lead to command…
CVE-2025-12235, published 2025-10-27. High severity, CVSS 8.0. EPSS: 5.2% chance of exploitation in the next 30 days. A vulnerability was found in Tenda CH22 1.0.0.1. This vulnerability affects the function fromSetIpBind of the file /goform/SetIpBind. The manipulation of the argument page results in buffer overflow.…
CVE-2025-12232, published 2025-10-27. Critical severity, CVSS 9.8. EPSS: 4.9% chance of exploitation in the next 30 days. A vulnerability was detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromSafeClientFilter of the file /goform/SafeClientFilter. Performing a manipulation of the argument…
CVE-2025-12233, published 2025-10-27. High severity, CVSS 8.8. EPSS: 4.7% chance of exploitation in the next 30 days. A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to…
CVE-2025-15229, published 2025-12-30. High severity, CVSS 7.5. EPSS: 4.6% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda CH22 up to 1.0.0.1. Affected by this vulnerability is the function fromDhcpListClient of the file /goform/DhcpListClient. Such manipulation of the argument…
CVE-2025-12236, published 2025-10-27. High severity, CVSS 8.8. EPSS: 3.5% chance of exploitation in the next 30 days. A vulnerability was determined in Tenda CH22 1.0.0.1. This issue affects the function fromDhcpListClient of the file /goform/DhcpListClient. This manipulation of the argument page causes buffer…
CVE-2025-5619, published 2025-06-04. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.1. This issue affects the function formaddUserName of the file /goform/addUserName. The manipulation of the…
CVE-2025-12234, published 2025-10-27. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the argument page leads to buffer overflow.…

Latest

CVE-2026-5962, published 2026-04-09. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was detected in Tenda CH22 1.0.0.6(468). This issue affects the function R7WebsSecurityHandlerfunction of the component httpd. The manipulation results in path traversal. The attack…
CVE-2026-5605, published 2026-04-06. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A weakness has been identified in Tenda CH22 1.0.0.1. This affects the function formWrlExtraSet of the file /goform/WrlExtraSet. Executing a manipulation of the argument GO can lead to stack-based…
CVE-2026-5604, published 2026-04-05. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formCertLocalPrecreate of the file /goform/CertLocalPrecreate of the component Parameter Handler.…
CVE-2026-5204, published 2026-03-31. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was determined in Tenda CH22 1.0.0.1. Affected is the function formWebTypeLibrary of the file /goform/webtypelibrary of the component Parameter Handler. This manipulation of the…
CVE-2026-5156, published 2026-03-31. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was determined in Tenda CH22 1.0.0.1. This impacts the function formQuickIndex of the file /goform/QuickIndex of the component Parameter Handler. This manipulation of the argument…
CVE-2026-5155, published 2026-03-30. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component Parameter Handler. The manipulation of the argument wanmode…
CVE-2026-5154, published 2026-03-30. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability has been found in Tenda CH22 1.0.0.1/1.If. The impacted element is the function fromSetCfm of the file /goform/setcfm of the component Parameter Handler. The manipulation of the…
CVE-2026-5152, published 2026-03-30. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability was detected in Tenda CH22 1.0.0.1. Impacted is the function formCreateFileName of the file /goform/createFileName. Performing a manipulation of the argument fileNameMit results in…