CVE-2026-77031— Tenda CH22 formcreateFileName command injection
Possible ATT&CK Techniques 2AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing ApplicationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-77031
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Tenda CH22 formcreateFileName command injection
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability has been found in Tenda CH22 1.0.0.1. The affected element is the function formcreateFileName of the file /goform/formcreateFileName. The manipulation of the argument fileNameMit leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
在命令中使用的特殊元素转义处理不恰当(命令注入)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-77031
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-77031
请登录查看更多情报信息。
Security Blog Posts for CVE-2026-77031 (1)
IV. Related Vulnerabilities
Same product: CH22
- CVE-2026-19346
Tenda CH22 CertListInfo formCertListInfo command injection - CVE-2026-15543
Tenda CH22 CertListInfo formCertListInfo buffer overflow - CVE-2026-5962
Tenda CH22 httpd R7WebsSecurityHandlerfunction path traversa - CVE-2026-5605
Tenda CH22 WrlExtraSet formWrlExtraSet stack-based overflow - CVE-2026-5604
Tenda CH22 Parameter CertLocalPrecreate formCertLocalPrecrea
Same vendor: Tenda
- CVE-2026-19924
Tenda AC10 httpd R7WebsSecurityHandler improper authenticati - CVE-2026-19824
Tenda W20E addIpMacBind ipMacBindListStore stack-based overf - CVE-2026-19823
Tenda W20E QoS Rule Deletion delQos formQOSRuleDel stack-bas - CVE-2026-19822
Tenda W20E QoS Edit editQos lstAdd stack-based overflow - CVE-2026-19821
Tenda AC12 httpd web management interface SetSysAutoRebbotCf
Same weakness: CWE-77
- CVE-2026-77683
Comfast CF-N1-S mbox-config system command injection - CVE-2026-61400
Apache CloudStack: Get and Run Diagnostics Command Injection - CVE-2026-54449
LangBot: Authenticated RCE Via MCP Configuration - CVE-2026-77004
Comfast CF-N1-S mbox-config sprintf command injection - CVE-2026-76591
TRENDnet TEW-755AP ssi email.cgi log_email_server command in
V. Comments for CVE-2026-77031
No comments yet