PatchSiren cyber security CVE debrief
CVE-2026-5204 Tenda CVE debrief
A vulnerability was determined in Tenda CH22 1.0.0.1. Affected is the function formWebTypeLibrary of the file /goform/webtypelibrary of the component Parameter Handler. This manipulation of the argument webSiteId causes stack-based buffer overflow. The attack can be initiated remotely. The vulnerability has a high CVSS score of 7.4, indicating high severity. Users of Tenda CH22 1.0.0.1 should assess the vulnerability and apply mitigations.
- Vendor
- Tenda
- Product
- CH22
- CVSS
- HIGH 7.4
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-03-31
- Original CVE updated
- 2026-07-24
- Advisory published
- 2026-03-31
- Advisory updated
- 2026-07-24
Who should care
Users of Tenda CH22 1.0.0.1 should assess the vulnerability and apply mitigations. Operators of affected systems should review the vulnerability details and implement compensating controls to limit exposure. Vulnerability management and security teams should prioritize this vulnerability due to its high severity and remote attack possibility.
Technical summary
The vulnerability is in the formWebTypeLibrary function of the /goform/webtypelibrary file in Tenda CH22 1.0.0.1. The manipulation of the webSiteId argument can cause a stack-based buffer overflow, allowing for remote attacks. This vulnerability has a high CVSS score of 7.4, indicating high severity. The attack can be initiated remotely, and the exploit has been publicly disclosed. Users of Tenda CH22 1.0.0.1 should verify their deployments and assess potential exposure. Operators of affected systems should review the vulnerability details and implement compensating controls to limit exposure. Vulnerability management and security teams should prioritize this vulnerability due to its high severity and remote attack possibility. It is recommended that users assess the vulnerability and apply mitigations.
Defensive priority
High priority due to remote attack possibility and high CVSS score.
Recommended defensive actions
- Inventory and assess Tenda CH22 1.0.0.1 devices for exposure
- Apply vendor patches or mitigations if available
- Monitor network traffic for suspicious activity
- Implement compensating controls to limit exposure
- Review relevant monitoring, detection, and logs for exposed assets that need extra review
- Track exceptions, retest remediated assets, and close the item only after evidence is documented
- Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
Evidence notes
The CVE record was published on 2026-03-31T16:16:35.973Z and was last modified on 2026-07-24T20:10:00.147Z. The NVD entry is currently Analyzed. The vulnerability affects Tenda CH22 1.0.0.1 and has a CVSS score of 7.4. The attack can be initiated remotely, and the exploit has been publicly disclosed. Users should verify their deployments and assess potential exposure.
Official resources
-
CVE-2026-5204 CVE record
CVE.org
-
CVE-2026-5204 NVD detail
NVD
-
Source item URL
nvd_modified
-
Mitigation or vendor reference
[email protected] - Exploit, Third Party Advisory
-
Mitigation or vendor reference
[email protected] - Third Party Advisory, VDB Entry
-
Mitigation or vendor reference
[email protected] - Third Party Advisory, VDB Entry
-
Source reference
[email protected] - Permissions Required, VDB Entry
-
Source reference
[email protected] - Product
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-03-31T16:16:35.973Z and has not been modified since then. The NVD entry is currently Analyzed.