Vulnerability · Published Dec 25, 2025 · Assigned by VulDB
CVE-2025-15076Tenda CH22 public path traversal
High 7.3
In plain English
A high-severity path traversal in CH22 from Tenda. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).
Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.7%top 47.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A weakness has been identified in Tenda CH22 1.0.0.1. Impacted is an unknown function of the file /public/. Executing a manipulation can lead to path traversal. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
Affected products (as reported)
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-338333 | Tenda CH22 public path traversal vdb-entry, technical-description
- VDB-338333 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #721411 | Tenda CH22 V1.0.0.1 Authentication Bypass Issues third-party-advisory
- https://github.com/master-abc/cve/blob/main/Tenda%20CH22%20V1.0.0.1%20Router%20Authentication%20Bypass%20Vulnerability%20in%20R7WebsSecurityHandler%20function.md exploit
- https://www.tenda.com.cn/ product