EUVD-2026-21313
GHSA-5v5f-c63q-mm7g
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V5 - File Handling Path canonicalization, traversal prevention
MITRE ATT&CK
2 techniques across 2 tactics: Discovery, Collection The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | CVSS 7.3 with unauthenticated remote network access and low complexity creates immediate exploitation risk for Tenda i6 devices. Path traversal enables unauthorized file access and potential information disclosure. Publicly available exploit code and moderate observed exploitation activity elevate priority despite limited integrity/availability impact compared to RCE variants. |
| Exploit ScenarioDerived | Attacker sends crafted HTTP request with path traversal sequences (e.g., ../) to R7WebsSecurityHandler endpoint without authentication. Server processes traversal payload, exposing sensitive files or configuration data readable by HTTP handler process. Publicly available exploit code exists. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Apr 10, 2026
Path traversal in Tenda i6 router firmware 1.0.0.7(2204) allows unauthenticated remote attackers to read, write, or delete arbitrary files via malicious HTTP requests to the R7WebsSecurityHandlerfunction component. CVSS 7.3 (High) reflects network-accessible exploitation without authentication. Publicly available exploit code exists, documented in a GitHub repository demonstrating attack vectors. Affects Tenda i6 wireless router deployments running vulnerable firmware version.
RemediationAI
No vendor-released patch identified at time of analysis. Monitor Tenda's official support portal (https://www.tenda.com.cn/) for firmware updates addressing CVE-2026-6024. Immediately implement network-level mitigations: restrict HTTP/HTTPS management interface access to trusted internal IP ranges via firewall rules, disable remote administration if not operationally required, deploy devices behind network segmentation to limit attack surface. Consider replacing affected units if vendor does not issue timely security updates. Consult VulDB technical analysis at https://vuldb.com/vuln/356600 and https://github.com/Litengzheng/vuldb_new/blob/main/M3/vul_84/README.md for additional context on exploitation techniques to inform detection strategies.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
CWE-22 path traversal in R7WebsSecurityHandlerfunction within HTTP Handler component fails to sanitize user-supplied path input. Attack vector (AV:N/AC:L/PR:N) confirms direct network exploitation without authentication or user interaction. Insufficient input validation enables directory traversal sequences to bypass intended file access restrictions, exposing filesystem resources to unauthorized manipulation.
Know when I6 gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Primary rating from Vendor (VulDB) · only source for this CVE.
CVSS VectorVendor: VulDB
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability was determined in Tenda i6 1.0.0.7(2204). Affected by this issue is the function R7WebsSecurityHandlerfunction of the component HTTP Handler. This manipulation causes path traversal. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Executive ViewAI
CVE-2026-6024 is a critical path traversal vulnerability in Tenda i6 routers that enables unauthenticated remote attackers to read, write, or delete arbitrary files on affected devices. Organizations deploying Tenda i6 routers running firmware version 1.0.0.7(2204) face immediate risk of configuration compromise, credential theft, and complete device takeover without requiring authentication.
No vendor-released patch identified at time of analysis. Interim mitigations: Restrict network access to router administrative interfaces using firewall rules; disable remote management features if supported; deploy routers behind additional security appliances; maintain network segmentation to limit lateral movement if router compromise occurs. Monitor router logs for suspicious file access patterns. Escalate to vendor for patch timeline and interim guidance.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Path traversal exploits occur when applications use user-controlled input to construct file system paths without proper validation.
Exploit-DB