Is there a public PoC exploit available for CVE-2026-5962?

Yes, a public proof-of-concept exploit is available for CVE-2026-5962. Prioritise patching immediately. EPSS: 0.1%.

Tenda CVE-2026-5962

Q: What is the CVSS score of CVE-2026-5962?

CVE-2026-5962 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-20982 MEDIUM

Path Traversal (CWE-22)

2026-04-09 VulDB

GHSA-m4j2-cxpj-8gp8

Path Traversal Tenda

5.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

Apr 29, 2026 - 01:11 NVD

6.9 (MEDIUM) 5.5 (MEDIUM)

PoC Detected

Apr 09, 2026 - 17:16 vuln.today

Public exploit code

EUVD ID Assigned

Apr 09, 2026 - 17:15 euvd

EUVD-2026-20982

Analysis Generated

Apr 09, 2026 - 17:15 vuln.today

CVE Published

Apr 09, 2026 - 16:30 nvd

MEDIUM 6.9

DescriptionCVE.org

A vulnerability was detected in Tenda CH22 1.0.0.6(468). This issue affects the function R7WebsSecurityHandlerfunction of the component httpd. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used.

AnalysisAI

Remote path traversal in Tenda CH22 1.0.0.6(468) httpd component allows unauthenticated attackers to access arbitrary files via the R7WebsSecurityHandlerfunction, with publicly available exploit code and a CVSS score of 6.9 indicating moderate real-world risk despite the low scope of impact (information disclosure only).

Technical ContextAI

The vulnerability exists in the httpd web server component of Tenda CH22 (CPE: cpe:2.3:a:tenda:ch22:*:*:*:*:*:*:*:*), specifically within the R7WebsSecurityHandlerfunction function. The root cause is CWE-22 (Improper Limitation of a Pathname to a Restricted Directory), a classic path traversal flaw where user-supplied input is not properly validated before being used in file path operations. This allows an attacker to traverse directory structures using sequences like '../' to access files outside the intended web root, compromising confidentiality of sensitive system files and configuration data.

RemediationAI

Firmware update from Tenda is the primary remediation. Users should visit https://www.tenda.com.cn/ to check for and apply the latest CH22 firmware version, as no specific patched version number is independently confirmed in available sources. In the interim, network-level mitigations include restricting external access to the CH22 device's web interface via firewall rules, segmenting the device to a trusted internal network only, and disabling remote management features if not required. Given the public availability of exploit code, patching should be prioritized.