CVE-2026-77031 - Tenda CH22 formcreateFileName command injection
Brief
CVE ID : CVE-2026-77031
Published : Aug. 20, 2026, 6:16 p. m.
- 52 minutes ago
Description : A vulnerability has been found in Tenda CH22 1.
- 0.
- The affected element is the function formcreateFileName of the file /goform/formcreateFileName. The manipulation of the argument fileNameMit leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Severity: 7.4
- HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
