Home / Vulnerability Intelligence / CVE-2026-5605

CVE-2026-5605 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: April 7, 2026

Tenda CH22 - Buffer Overflow

Published: April 6, 2026Updated: April 7, 2026Remote Exploitable

Overview

Tenda CH22 1.0.0.1 contains a stack-based buffer overflow caused by manipulation of the "GO" argument in /goform/WrlExtraSet, letting remote attackers execute arbitrary code, exploit requires no special privileges.

Severity & Score

Severity: High

CVSS Score: 8.8

EPSS Score: 2.0%(Probability of exploitation in next 30 days)

Impact

Remote attackers can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to the latest version.

References

Social Media Activity(2 posts)

TheHackerWire

@thehackerwire

Apr 6, 2026

🟠 CVE-2026-5605 - High (8.8) A weakness has been identified in Tenda CH22 1.0.0.1. This affects the function formWrlExtraSet of the file /goform/WrlExtraSet. Executing a manipulation of the argument GO can lead to stack-based buffer overflow. The attack can be executed remote... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5605/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

OffSequence

@offseq

Apr 6, 2026

🚨 HIGH severity: CVE-2026-5605 in Tenda CH22 v1.0.0.1 — stack-based buffer overflow in /goform/WrlExtraSet. No patch yet. Restrict remote access & monitor for threats. Details: https://radar.offseq.com/threat/cve-2026-5605-stack-based-buffer-overflow-in-tenda-5175b382 #OffSeq #Vulnerability #IoTSecurity

View original post

Related Resources

Details

CVE ID: CVE-2026-5605
Severity: High
CVSS Score: 8.8
Type: buffer_overflow
Status: unconfirmed
EPSS: 2.0%
Social Posts: 2

CWE

CWE-119

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

2.0%Probability of exploitation in the next 30 days