Is CVE-2026-19346 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-19346?

CVE-2026-19346 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-19346

Description

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.