← back
CVE-2026-5962

Tenda CH22 httpd R7WebsSecurityHandlerfunction path traversal

CVSS 6.9 MEDIUMEPSS 0.5%CWE-22
A vulnerability was detected in Tenda CH22 1.0.0.6(468). This issue affects the function R7WebsSecurityHandlerfunction of the component httpd. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
Tenda · CH22
public PoCs found — 1
cve_referencegithub.com/Litengzheng/vuldb_new/blob/main/CH22/vul_55/README.mdunverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/Litengzheng/vuldb_new/blob/main/CH22/vul_55/README.mdhttps://vuldb.com/submit/791277https://vuldb.com/vuln/356515https://vuldb.com/vuln/356515/ctihttps://www.tenda.com.cn/