{"id":"CVE-2026-6024","state":"PUBLISHED","title":"Tenda i6 HTTP R7WebsSecurityHandlerfunction path traversal","description":"A vulnerability was determined in Tenda i6 1.0.0.7(2204). Affected by this issue is the function R7WebsSecurityHandlerfunction of the component HTTP Handler. This manipulation causes path traversal. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.","publishedAt":"2026-04-10T05:15:13.771Z","updatedAt":"2026-04-10T15:54:20.628Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["Tenda i6"],"affected":[{"vendor":"Tenda","product":"i6","versions":[{"version":"1.0.0.7(2204)","status":"affected"}],"modules":["HTTP Handler"]}],"references":["https://vuldb.com/vuln/356600","https://vuldb.com/vuln/356600/cti","https://vuldb.com/submit/791826","https://github.com/Litengzheng/vuldb_new/blob/main/M3/vul_84/README.md","https://www.tenda.com.cn/"],"weaknesses":["CWE-22"],"ingestedAt":"2026-10-29T20:12:49.727Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/6xxx/CVE-2026-6024.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-6024","state":"PUBLISHED","datePublished":"2026-04-10T05:15:13.771Z","dateUpdated":"2026-04-10T15:54:20.628Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-04-09T15:51:37.912Z"},"containers":{"cna":{"title":"Tenda i6 HTTP R7WebsSecurityHandlerfunction path traversal","descriptions":[{"lang":"en","value":"A vulnerability was determined in Tenda i6 1.0.0.7(2204). Affected by this issue is the function R7WebsSecurityHandlerfunction of the component HTTP Handler. This manipulation causes path traversal. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized."}],"affected":[{"vendor":"Tenda","product":"i6","versions":[{"version":"1.0.0.7(2204)","status":"affected"}],"modules":["HTTP Handler"]}],"references":[{"url":"https://vuldb.com/vuln/356600","name":"VDB-356600 | Tenda i6 HTTP R7WebsSecurityHandlerfunction path traversal","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/356600/cti","name":"VDB-356600 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/submit/791826","name":"Submit #791826 | Tenda i6 V1.0.0.7(2204) Path Traversal","tags":["third-party-advisory"]},{"url":"https://github.com/Litengzheng/vuldb_new/blob/main/M3/vul_84/README.md","tags":["exploit"]},{"url":"https://www.tenda.com.cn/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":7.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV3_0":{"version":"3.0","baseScore":7.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV2_0":{"version":"2.0","baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-22","type":"CWE","lang":"en","description":"Path Traversal"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-04-10T05:15:13.771Z"},"timeline":[{"time":"2026-04-09T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-04-09T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-04-09T17:56:44.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"LtzHuster2 (VulDB User)","type":"reporter"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-04-10T15:46:22.558447Z","id":"CVE-2026-6024","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-04-10T15:54:20.628Z"}}]}}}