PT-2026-31583 · Tenda · I3

Fan95 · Published 2026-04-09 · Updated 2026-04-09 · CVE-2026-5841

NVD

CVSS v2.0

7.5

High

AV:N/AC:L/Au:N/C:P/I:P/A:P

A weakness has been identified in Tenda i3 1.0.0.6(2204). The affected element is the function R7WebsSecurityHandler of the component HTTP Handler. Executing a manipulation can lead to path traversal. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-5841

Affected Products

I3

References · 6

• 🔥 https://github.com/MrXiaoFan/TendaVul/tree/main/tenda-i3-V1.0.0.6(2204)-R7WebsSecurityHandler-Authentication%20Bypass%20Issues · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5841 · Security Note
• https://vuldb.com/submit/789935 · Note
• https://tenda.com.cn · Note
• https://vuldb.com/vuln/356297 · Note
• https://vuldb.com/vuln/356297/cti · Note