← Back to feed
Vulnerabilities & PatchesEmerging1 sourceAug 20, 2026 · 18:16via CVEFeed

CVE-2026-77031 - Tenda CH22 formcreateFileName command injection

Brief

CVE ID : CVE-2026-77031

Published : Aug. 20, 2026, 6:16 p. m.

  • 52 minutes ago

Description : A vulnerability has been found in Tenda CH22 1.

  • 0.
  • The affected element is the function formcreateFileName of the file /goform/formcreateFileName. The manipulation of the argument fileNameMit leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Severity: 7.4

  • HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Read more on CVEFeed