CVE-2026-78141 is a vulnerability classified as Improper Neutralization of Special Elements used in a Command ('Command Injection') and Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), affecting CH22 (affected versions: 1.0.0.1). This vulnerability is rated Medium, with a CVSS score of 5.3. Public exploit code or evidence is available for this vulnerability, but that does not confirm exploitation in the wild.
A short verification protects the vulnerability source and prevents automated AI abuse.
A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
en
