CVE-2026-78141 | Tenda CH22 1.0.0.1 /goform/exeCommand formexeCommand cmdinput command injection

August 23, 2026 Yanac

A vulnerability has been found in Tenda CH22 1.0.0.1 and classified as critical. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection.

This vulnerability is listed as CVE-2026-78141. The attack may be initiated remotely. In addition, an exploit is available.VulDB Recent EntriesRead More