Which versions of Tenda are affected by CVE-2026-6024?

CVE-2026-6024 is a critical path traversal vulnerability in Tenda i6 routers that enables unauthenticated remote attackers to read, write, or delete arbitrary files on affected devices.

Is there a public PoC exploit available for CVE-2026-6024?

Yes, a public proof-of-concept exploit is available for CVE-2026-6024. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-6024?

Within 24 hours: Inventory all Tenda i6 routers in production and identify devices running firmware 1.0.0.7(2204). Within 7 days: Isolate affected routers from untrusted networks or implement network segmentation limiting external access to administrative interfaces. Within 30 days: Monitor Tenda vendor advisories for firmware patches; if available, upgrade all vulnerable devices to patched firmware versions immediately upon release. Concurrently, evaluate replacement of Tenda i6 routers with alternative vendors offering active security support.

Tenda CVE-2026-6024

Q: What is the CVSS score of CVE-2026-6024?

CVE-2026-6024 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-21313 MEDIUM

Path Traversal (CWE-22)

2026-04-10 VulDB

GHSA-5v5f-c63q-mm7g

Path Traversal Tenda

5.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

Apr 29, 2026 - 01:11 NVD

6.9 (MEDIUM) 5.5 (MEDIUM)

PoC Detected

Apr 10, 2026 - 06:16 vuln.today

Public exploit code

EUVD ID Assigned

Apr 10, 2026 - 05:45 euvd

EUVD-2026-21313

Analysis Generated

Apr 10, 2026 - 05:45 vuln.today

CVE Published

Apr 10, 2026 - 05:15 nvd

MEDIUM 6.9

DescriptionCVE.org

A vulnerability was determined in Tenda i6 1.0.0.7(2204). Affected by this issue is the function R7WebsSecurityHandlerfunction of the component HTTP Handler. This manipulation causes path traversal. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

AnalysisAI

Path traversal in Tenda i6 router firmware 1.0.0.7(2204) allows unauthenticated remote attackers to read, write, or delete arbitrary files via malicious HTTP requests to the R7WebsSecurityHandlerfunction component. CVSS 7.3 (High) reflects network-accessible exploitation without authentication. Publicly available exploit code exists, documented in a GitHub repository demonstrating attack vectors. Affects Tenda i6 wireless router deployments running vulnerable firmware version.

Technical ContextAI

CWE-22 path traversal in R7WebsSecurityHandlerfunction within HTTP Handler component fails to sanitize user-supplied path input. Attack vector (AV:N/AC:L/PR:N) confirms direct network exploitation without authentication or user interaction. Insufficient input validation enables directory traversal sequences to bypass intended file access restrictions, exposing filesystem resources to unauthorized manipulation.

RemediationAI

No vendor-released patch identified at time of analysis. Monitor Tenda's official support portal (https://www.tenda.com.cn/) for firmware updates addressing CVE-2026-6024. Immediately implement network-level mitigations: restrict HTTP/HTTPS management interface access to trusted internal IP ranges via firewall rules, disable remote administration if not operationally required, deploy devices behind network segmentation to limit attack surface. Consider replacing affected units if vendor does not issue timely security updates. Consult VulDB technical analysis at https://vuldb.com/vuln/356600 and https://github.com/Litengzheng/vuldb_new/blob/main/M3/vul_84/README.md for additional context on exploitation techniques to inform detection strategies.