VULNERABILITY INTELLIGENCE

CVE-2025-9007

CVSS score9 HIGH

EPSS probability0.77%

CISA KEVNot currently listed

Published2025-08-15

Last modified2026-06-17

Description

A vulnerability has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function formeditFileName of the file /goform/editFileName. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.