A vulnerability was found in Tenda CH22 1.0.0.1. It has been classified as critical. The impacted element is the function formCertLocalPrecreate of the file /goform/CertLocalPrecreate of the component Parameter Handler. Performing a manipulation of the argument standard results in stack-based buffer overflow.

This vulnerability is known as CVE-2026-5604. Remote exploitation of the attack is possible. Furthermore, an exploit is available.