{"cvss":0.0,"datePublished":"2026-09-01T00:00:00Z","dateUpdated":"2026-09-01T00:00:00Z","description":"A flaw has been found in Tenda CH22 1.0.0.1. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. Executing a manipulation of the argument mac can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used.","dueDate":"","id":"CVE-2026-5153","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"ch22_firmware","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Tenda ch22_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component","vendor":"Tenda"}