Which versions of Tenda are affected by CVE-2026-5604?

Tenda CH22 router firmware 1.0.0.1 contains a stack-based buffer overflow vulnerability that allows authenticated attackers to execute arbitrary code remotely, potentially compromising network…

Is there a public PoC exploit available for CVE-2026-5604?

Yes, a public proof-of-concept exploit is available for CVE-2026-5604. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-5604?

Within 24 hours: Identify and inventory all Tenda CH22 routers running firmware version 1.0.0.1 in production; disable remote administrative access and restrict management interfaces to trusted networks only. Within 7 days: Contact Tenda for patched firmware availability and release timeline; implement network segmentation to isolate affected routers and limit lateral movement risk. Within 30 days: Apply patched firmware as it becomes available; if no patch is released, evaluate replacement with routers from vendors with active security support and patch history.

Tenda CVE-2026-5604

Q: What is the CVSS score of CVE-2026-5604?

CVE-2026-5604 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-19138 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-04-05 VulDB

GHSA-cxp5-wp2v-64xx

Tenda Buffer Overflow Stack Overflow

7.4

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

PoC Detected

Apr 07, 2026 - 13:20 vuln.today

Public exploit code

EUVD ID Assigned

Apr 05, 2026 - 23:00 euvd

EUVD-2026-19138

Analysis Generated

Apr 05, 2026 - 23:00 vuln.today

CVE Published

Apr 05, 2026 - 22:45 nvd

HIGH 7.4

DescriptionCVE.org

A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formCertLocalPrecreate of the file /goform/CertLocalPrecreate of the component Parameter Handler. Performing a manipulation of the argument standard results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

AnalysisAI

Stack-based buffer overflow in Tenda CH22 router firmware version 1.0.0.1 allows authenticated remote attackers to execute arbitrary code via crafted 'standard' parameter to the formCertLocalPrecreate function in /goform/CertLocalPrecreate endpoint. Publicly available exploit code exists (GitHub), CVSS 7.4 (High), but no active exploitation confirmed (not in CISA KEV). CVSS vector indicates low attack complexity with required authentication (PR:L), affecting all three confidentiality, integrity, and availability at high impact levels.

Technical ContextAI

This vulnerability affects the Tenda CH22 wireless router's certificate management component. The root cause is a CWE-121 stack-based buffer overflow occurring in the formCertLocalPrecreate function within the Parameter Handler component. Stack-based buffer overflows occur when a program writes more data to a buffer located on the stack than it was allocated to hold, potentially overwriting adjacent memory including return addresses and function pointers. The vulnerable endpoint /goform/CertLocalPrecreate processes the 'standard' parameter without proper bounds checking, allowing attackers to overflow the stack buffer. Based on the CPE identifier (cpe:2.3:a:tenda:ch22), this is a firmware-level vulnerability in the web management interface of the Tenda CH22 router series. The affected component appears to handle local certificate precreation operations, suggesting the vulnerability exists in certificate provisioning or SSL/TLS configuration functionality accessible through the device's administrative web interface.

RemediationAI

No vendor-released patch or firmware update has been identified in available advisory data at time of analysis. Users should monitor Tenda's official support portal (https://www.tenda.com.cn/) for security updates and firmware releases addressing CVE-2026-5604. Until a patch is available, implement the following mitigations: disable remote administrative access to the router's web interface, ensure administrative credentials use strong unique passwords (never defaults), restrict administrative access to trusted IP addresses only via firewall rules, place affected devices behind additional network segmentation, and monitor for unauthorized administrative login attempts. For enterprise environments, consider replacing affected Tenda CH22 devices with alternative router solutions that receive regular security updates. Organizations should treat all Tenda CH22 routers running firmware 1.0.0.1 as high-risk until vendor patches are released and applied. Additional technical details about the vulnerability are available at https://vuldb.com/vuln/355396/cti and exploit analysis at https://github.com/Litengzheng/vuldb_new/blob/main/CH22/vul_52/README.md.