{"metadata": {"vulnerability": "CVE-2026-5604", "count": 22, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 13}}, "data": [{"timestamp": "2026-04-05T00:00:00Z", "date_only": false, "value": "2026-04-05T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2026-5604", "field": "containers.cna.timeline.0.time", "text": "Advisory disclosed"}, {"timestamp": "2026-04-05T02:00:00Z", "date_only": false, "value": "2026-04-05T02:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2026-5604", "field": "containers.cna.timeline.1.time", "text": "VulDB entry created"}, {"timestamp": "2026-04-05T13:59:53.852Z", "date_only": false, "value": "2026-04-05T13:59:53.852Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-5604", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-04-05T14:50:06.378Z", "date_only": false, "value": "2026-04-05T14:50:06.378381Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/116352654112501654", "record": "CVE-2026-5604", "field": "creation_timestamp", "uuid": "84c968c6-055a-4f33-8645-837785c4b348", "url": "https://infosec.exchange/users/vuldb/statuses/116352654112501654"}, {"timestamp": "2026-04-05T16:04:58Z", "date_only": false, "value": "2026-04-05T16:04:58.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2026-5604", "field": "containers.cna.timeline.2.time", "text": "VulDB entry last update"}, {"timestamp": "2026-04-05T22:45:12.714Z", "date_only": false, "value": "2026-04-05T22:45:12.714Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-5604", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-05T22:45:12.714Z", "date_only": false, "value": "2026-04-05T22:45:12.714Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2026-5604", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-05T23:16:20Z", "date_only": false, "value": "2026-04-05T23:16:20Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CXP5-WP2V-64XX", "record": "GHSA-CXP5-WP2V-64XX", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-04-05T23:16:20.593Z", "date_only": false, "value": "2026-04-05T23:16:20.593", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-5604", "record": "FKIE_CVE-2026-5604", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-05T23:26:06.618Z", "date_only": false, "value": "2026-04-05T23:26:06.618017Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mirvjvspiw25", "record": "CVE-2026-5604", "field": "creation_timestamp", "uuid": "c49150d5-821f-494d-99c5-919083c7579d", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mirvjvspiw25"}, {"timestamp": "2026-04-06T00:30:24Z", "date_only": false, "value": "2026-04-06T00:30:24Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CXP5-WP2V-64XX", "record": "GHSA-CXP5-WP2V-64XX", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-06T00:30:24Z", "date_only": false, "value": "2026-04-06T00:30:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CXP5-WP2V-64XX", "record": "GHSA-CXP5-WP2V-64XX", "field": "modified", "linked_record": true}, {"timestamp": "2026-04-06T01:15:46Z", "date_only": false, "value": "2026-04-06T01:15:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BT8DhP3Q5ooWno-YfhgeKXhZxFC8Z7Uld7C-bLT2VK9xx3k", "record": "CVE-2026-5604", "field": "creation_timestamp", "uuid": "a53d7838-8123-4b60-8f40-7d97f1ceee35", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-06T14:28:21Z", "date_only": false, "value": "2026-04-06T14:28:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bdufstecru/3060", "record": "CVE-2026-5604", "field": "creation_timestamp", "uuid": "f49b0e9c-cf07-4009-996b-7c0cdbd50867", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 formCertLocalPrecreate() \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Tenda CH22 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 standard. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e POST-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\n\nBDU:2026-04708\nCVE-2026-5604\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0440\u043e\u0432\u043d\u044f \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (WAF) \u0434\u043b\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430;\n- \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0442\u0438 \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f (\u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f, \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438) \u0438 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439;\n- \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439;\n- \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435/\u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 (\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442).\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438:\nhttps://github.com/Litengzheng/vuldb_new/blob/main/CH22/vul_52/README.md", "url": "https://t.me/bdufstecru/3060", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-06T18:20:08.810Z", "date_only": false, "value": "2026-04-06T18:20:08.810494Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-5604", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-04-06T18:20:08.810Z", "date_only": false, "value": "2026-04-06T18:20:08.810494Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-5604", "record": "FKIE_CVE-2026-5604", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-04-06T18:20:21.449Z", "date_only": false, "value": "2026-04-06T18:20:21.449Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-5604", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-06T18:20:21.449Z", "date_only": false, "value": "2026-04-06T18:20:21.449Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-5604", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-10T00:00:00Z", "date_only": true, "value": "2026-04-10", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2026-34614", "record": "CNVD-2026-34614", "field": "submitTime", "linked_record": true}, {"timestamp": "2026-05-03T20:07:10.141Z", "date_only": false, "value": "2026-05-03T20:07:10.141683Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkxxhwocus26", "record": "CVE-2026-5604", "field": "creation_timestamp", "uuid": "32b56ded-9238-4a84-a65d-5373c747fae4", "content": "\ud83d\udccc CVE-2026-5604 - A security flaw has been discovered in Tenda CH22 1.0.0.1. The impacted element is the function formCertLocalPrecreate of the file /goform/CertLocalPr... https://www.cyberhub.blog/cves/CVE-2026-5604", "url": "https://bsky.app/profile/cyberhub.blog/post/3mkxxhwocus26"}, {"timestamp": "2026-07-24T20:10:00.147Z", "date_only": false, "value": "2026-07-24T20:10:00.147", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-5604", "record": "FKIE_CVE-2026-5604", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-08-26T00:00:00Z", "date_only": true, "value": "2026-08-26", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2026-34614", "record": "CNVD-2026-34614", "field": "openTime", "linked_record": true}], "metrics": {"as_of": "2026-11-07T01:56:14.202Z", "anchors": {"origin": {"timestamp": "2026-04-05T22:45:12.714Z", "date_only": false, "value": "2026-04-05T22:45:12.714Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-5604", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-04-05T22:45:12.714Z", "date_only": false, "value": "2026-04-05T22:45:12.714Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-5604", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-04-06T01:15:46Z", "date_only": false, "value": "2026-04-06T01:15:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BT8DhP3Q5ooWno-YfhgeKXhZxFC8Z7Uld7C-bLT2VK9xx3k", "record": "CVE-2026-5604", "field": "creation_timestamp", "uuid": "a53d7838-8123-4b60-8f40-7d97f1ceee35", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 9033.286, "hours": 2.509246111111111, "days": 0.1045519212962963, "min_seconds": 9033.286, "max_seconds": 9033.286, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-05T22:45:12.714Z", "date_only": false, "value": "2026-04-05T22:45:12.714Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-5604", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-04-06T01:15:46Z", "date_only": false, "value": "2026-04-06T01:15:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BT8DhP3Q5ooWno-YfhgeKXhZxFC8Z7Uld7C-bLT2VK9xx3k", "record": "CVE-2026-5604", "field": "creation_timestamp", "uuid": "a53d7838-8123-4b60-8f40-7d97f1ceee35", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 18587461.48846, "hours": 5163.183746794444, "days": 215.1326561164352, "min_seconds": 18587461.48846, "max_seconds": 18587461.48846, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-05T22:45:12.714Z", "date_only": false, "value": "2026-04-05T22:45:12.714Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-5604", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-07T01:56:14.202Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 18578428.20246, "hours": 5160.674500683333, "days": 215.02810419513887, "min_seconds": 18578428.20246, "max_seconds": 18578428.20246, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-06T01:15:46Z", "date_only": false, "value": "2026-04-06T01:15:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BT8DhP3Q5ooWno-YfhgeKXhZxFC8Z7Uld7C-bLT2VK9xx3k", "record": "CVE-2026-5604", "field": "creation_timestamp", "uuid": "a53d7838-8123-4b60-8f40-7d97f1ceee35", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-07T01:56:14.202Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}