Is CVE-2026-78063 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-78063?

CVE-2026-78063 has a CVSS v3 severity of HIGH (7.4).

Back

CVE-2026-78063

Description

A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formeditFileName of the file /goform/editFileName. The manipulation of the argument editNameMit results in command injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.