CVE-2026-5204 | Tenda CH22 1.0.0.1 Parameter /goform/webtypelibrary formWebTypeLibrary webSiteId stack-based overflow

A vulnerability was found in Tenda CH22 1.0.0.1. It has been classified as critical. Affected is the function formWebTypeLibrary of the file /goform/webtypelibrary of the component Parameter Handler. This manipulation of the argument webSiteId causes stack-based buffer overflow.

This vulnerability is handled as CVE-2026-5204. The attack can be initiated remotely. Additionally, an exploit exists.