CVE-2026-78063
HIGH
NVD
CVSS Score
7.4
Severity
HIGH
Published
Aug 23, 2026
Vendor
unknown
Description
A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument editNameMit results in command injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.