ZeroDay Findings
Sign inSign up

Findings

CVE-2026-5841

A weakness has been identified in Tenda i3 1.0.0.6(2204).

Published Apr 9, 2026 · updated Jun 17, 2026 · tenda i3 firmware

A weakness has been identified in Tenda i3 1.0.0.6(2204). The affected element is the function R7WebsSecurityHandler of the component HTTP Handler. Executing a manipulation can lead to path traversal. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 9, 2026 · NIST NVD

    Detected

    A weakness has been identified in Tenda i3 1.0.0.6(2204). The affected element is the function R7WebsSecurityHandler of the component HTTP Handler. Executing a manipulation can lead to path traversal. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

  2. Jun 17, 2026 · NIST NVD

    Updated

    A weakness has been identified in Tenda i3 1.0.0.6(2204). The affected element is the function R7WebsSecurityHandler of the component HTTP Handler. Executing a manipulation can lead to path traversal. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

Affected

  • cpe tenda/i3 firmware1.0.0.6\(2204\)

Sources

  • CVE.orgVulnerability recordCVE-2026-5841

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-5841

    A weakness has been identified in Tenda i3 1.0.0.6(2204). The affected element is the function R7WebsSecurityHandler of the component HTTP Handler. Executing a manipulation can lead to path traversal. The attack can be executed remotely. The exploit has been made available to the

    nvd.nist.gov

References