01 Record

CVE-2026-77031

Tenda CH22 formcreateFileName command injection

MediumPUBLISHEDCNA: VulDB

Base score5.3 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P

02 Description

Tenda CH22 formcreateFileName command injection

Published

2026-08-20 17:15Z1 DAY AGO

Last updated

2026-08-20 18:28Z1 DAY AGO

Reserved

2026-08-20

Assigning CNA

VulDB

Record state

PUBLISHED

Severity

Medium (CVSS 5.3)

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P

Weaknesses

CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Class
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')Class

SSVC decision

ExploitationpocAutomatablenoTechnical Impactpartial

Data version

5.2

Document digest

2c46cbc6f96d3f7a0975c1f501882e872a27fa9075a064b875c489489f0110d3

VendorProductVersionsPlatforms

TendaCH221.0.0.1—

vuldb.comVDB-393642 | Tenda CH22 formcreateFileName command injectionhttps://vuldb.com/vuln/393642vdb-entrytechnical-description
vuldb.comVDB-393642 | CTI Indicators (IOB, IOC, TTP, IOA)https://vuldb.com/vuln/393642/ctisignaturepermissions-required
vuldb.comCVE-2026-77031 | CVE Analysis and Reporthttps://vuldb.com/cve/CVE-2026-77031third-party-advisory
vuldb.comSubmit #880667 | Tenda CH22 V1.0.0.1 Command Injectionhttps://vuldb.com/submit/880667third-party-advisory
candle-throne-f75.notion.sitehttps://candle-throne-f75.notion.site/Tenda-CH22-formcreateFileName-392df0aa118580c38c4ad15fb15cd30dexploit
www.tenda.com.cnhttps://www.tenda.com.cn/product