CVE-2025-12274

A security vulnerability has been detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument page leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

• CWE-119
• CWE-120

• https://github.com/QIU-DIE/CVE/issues/23Exploit, Issue Tracking
• https://vuldb.com/?ctiid.329946Permissions Required, VDB Entry
• https://vuldb.com/?id.329946Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.674165Third Party Advisory, VDB Entry
• https://www.tenda.com.cn/Product
• https://github.com/QIU-DIE/CVE/issues/23Exploit, Issue Tracking

Published

Oct 27, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-12269A vulnerability was found in LearnHouse up to 98dfad76aad707…5.4
• CVE-2025-1227A vulnerability was found in ywoa up to 2024.07.03. It has b…8.8
• CVE-2025-12270A vulnerability was determined in LearnHouse up to 98dfad76a…7.5
• CVE-2025-12271A vulnerability was identified in Tenda CH22 1.0.0.1. This a…9.8
• CVE-2025-12272A security flaw has been discovered in Tenda CH22 1.0.0.1. T…9.8
• CVE-2025-12273A weakness has been identified in Tenda CH22 1.0.0.1. Affect…9.8
• CVE-2025-12275Mail Configuration File Manipulation + Command Execution.Thi…9.8
• CVE-2025-12276A vulnerability was detected in LearnHouse up to 98dfad76aad…7.5
• CVE-2025-12277A flaw has been found in Abdullah-Hasan-Sajjad Online-School…7.3
• CVE-2025-12278Logout Functionality not Working.This issue affects BLU-IC2:…6.5
• CVE-2025-12279A vulnerability has been found in code-projects Client Detai…4.8
• CVE-2025-1228A vulnerability classified as problematic has been found in …5.3