Home / Vulnerability Intelligence / CVE-2026-5156

CVE-2026-5156 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: March 31, 2026

Tenda CH22 - Buffer Overflow

Published: March 31, 2026Updated: March 31, 2026Remote Exploitable

Overview

Tenda CH22 1.0.0.1 contains a stack-based buffer overflow caused by manipulation of the "mit_linktype" argument in /goform/QuickIndex Parameter Handler, letting remote attackers cause memory corruption, exploit requires crafted request.

Severity & Score

Severity: High

CVSS Score: 8.8

Impact

Remote attackers can cause memory corruption leading to potential remote code execution or system crash.

Mitigation

Update to the latest version or apply vendor patches addressing this vulnerability.

References

https://github.com/Litengzheng/vuldb_new/blob/main/CH22/vul_46/README.md
https://vuldb.com/submit/780208
https://vuldb.com/vuln/354188
https://vuldb.com/vuln/354188/cti
https://www.tenda.com.cn/

Related Resources

Vulnerability Intelligence Dashboard
Credential Scanner

Details

CVE ID: CVE-2026-5156
Severity: High
CVSS Score: 8.8
Type: buffer_overflow
Status: new

CWE

CWE-119

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H