CVE-2026-5156 - Vulnerability Analysis

Overview

Tenda CH22 1.0.0.1 contains a stack-based buffer overflow caused by manipulation of the "mit_linktype" argument in /goform/QuickIndex Parameter Handler, letting remote attackers cause memory corruption, exploit requires crafted request.

Severity & Score

Impact

Remote attackers can cause memory corruption leading to potential remote code execution or system crash.

Mitigation

Update to the latest version or apply vendor patches addressing this vulnerability.

References

• https://github.com/Litengzheng/vuldb_new/blob/main/CH22/vul_46/README.md
• https://vuldb.com/submit/780208
• https://vuldb.com/vuln/354188
• https://vuldb.com/vuln/354188/cti
• https://www.tenda.com.cn/

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 31, 2026

🟠 CVE-2026-5156 - High (8.8) A vulnerability was determined in Tenda CH22 1.0.0.1. This impacts the function formQuickIndex of the file /goform/QuickIndex of the component Parameter Handler. This manipulation of the argument mit_linktype causes stack-based buffer overflow. Th... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5156/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner