Which versions of Tenda i9 are affected by CVE-2026-7036?

CVE-2026-7036 is a critical path traversal vulnerability in Tenda i9 routers that allows unauthenticated remote attackers to access sensitive files and modify system configurations without…

Is there a public PoC exploit available for CVE-2026-7036?

Yes, a public proof-of-concept exploit is available for CVE-2026-7036. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-7036?

Within 24 hours: Identify all Tenda i9 routers in your network inventory and isolate affected units (firmware 1.0.0.5(2204)) from production traffic if business-critical. Within 7 days: Contact Tenda support for firmware update availability and implement network segmentation to restrict HTTP access to these devices to authorized administrative networks only. Within 30 days: Deploy WAF or IPS rules to block path traversal patterns targeting the R7WebsSecurityHandler function, monitor Tenda security advisories for patched firmware release, and develop a replacement timeline if patches remain unavailable.

Tenda i9 CVE-2026-7036

Q: What is the CVSS score of CVE-2026-7036?

CVE-2026-7036 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-25712 MEDIUM

Path Traversal (CWE-22)

2026-04-26 VulDB

Tenda Path Traversal

5.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

PoC Detected

Apr 30, 2026 - 14:10 vuln.today

Public exploit code

CVSS changed

Apr 29, 2026 - 01:12 NVD

6.9 (MEDIUM) 5.5 (MEDIUM)

Severity Changed

Apr 26, 2026 - 12:22 NVD

HIGH MEDIUM

CVSS changed

Apr 26, 2026 - 12:22 NVD

7.3 (HIGH) 6.9 (MEDIUM)

Analysis Generated

Apr 26, 2026 - 12:00 vuln.today

EUVD ID Assigned

Apr 26, 2026 - 11:45 euvd

EUVD-2026-25712

Analysis Generated

Apr 26, 2026 - 11:45 vuln.today

CVE Published

Apr 26, 2026 - 11:30 nvd

MEDIUM 5.5

DescriptionCVE.org

A vulnerability was identified in Tenda i9 1.0.0.5(2204). This vulnerability affects the function R7WebsSecurityHandlerfunction of the component HTTP Handler. The manipulation leads to path traversal. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

AnalysisAI

Path traversal in Tenda i9 router firmware version 1.0.0.5(2204) allows remote unauthenticated attackers to access arbitrary files, modify system configurations, and potentially disrupt device operation via the R7WebsSecurityHandlerfunction in the HTTP Handler component. Publicly available exploit code exists on GitHub (Litengzheng/vuldb_new), enabling straightforward exploitation with EPSS-assessed risk. The vulnerability permits confidentiality, integrity, and availability impacts with low attack complexity and no required user interaction, making it a realistic target for automated scanning and exploitation.

Technical ContextAI

This vulnerability resides in the R7WebsSecurityHandlerfunction within the HTTP Handler component of Tenda i9 router firmware. Path traversal (CWE-22) vulnerabilities occur when applications fail to properly validate or sanitize file path inputs, allowing attackers to use special character sequences like '../' to navigate outside intended directories. The affected component processes HTTP requests and appears to lack adequate input validation on file path parameters, enabling attackers to traverse the router's filesystem. The Tenda i9 is a consumer-grade wireless router, and its web management interface (typically running on embedded Linux) handles administrative functions through this vulnerable HTTP handler. The CPE identifier cpe:2.3:a:tenda:i9:*:*:*:*:*:*:*:* indicates application-level firmware affecting the i9 product line.

RemediationAI

No vendor-released patch has been identified at time of analysis - the Tenda website reference does not link to a specific security advisory or firmware update addressing CVE-2026-7036. Users should monitor https://www.tenda.com.cn/ for future firmware releases and apply updates immediately when available. Until an official patch is released, implement these compensating controls: (1) Disable remote management access to the router's web interface and restrict administrative access to trusted internal IP addresses only via firewall rules - this eliminates the AV:N vector but prevents legitimate remote administration; (2) Place Tenda i9 devices behind a separate firewall or network segmentation boundary to limit attacker lateral movement if compromised - adds complexity to network architecture; (3) Enable logging and monitor for suspicious HTTP requests containing path traversal patterns like '../', '/etc/passwd', or '/tmp/' in access logs - requires active log analysis infrastructure; (4) Consider replacing the device with alternative router hardware from vendors with stronger security track records if this is a business-critical deployment - involves hardware replacement costs. Note that disabling the web interface entirely may break firmware update mechanisms and monitoring capabilities.