CVE-2025-12271
Critical · 9.8CVSS
9.8
EPSS
1.0%
Published
Oct 27, 2025
CISA due date
—
The record
A vulnerability was identified in Tenda CH22 1.0.0.1. This affects the function fromRouteStatic of the file /goform/RouteStatic. Such manipulation of the argument page leads to buffer overflow. The attack can be launched remotely. The exploit is publicly available and might be used.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|