CVE-2026-5849

CWE-22 — Path Traversal3 documents3 sources
Severity
6.9MEDIUM
EPSS
0.1%
top 75.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Tenda I12
Timeline
PublishedApr 9

Description

A vulnerability was determined in Tenda i12 1.0.0.11(3862). The impacted element is an unknown function of the component HTTP Handler. Executing a manipulation can lead to path traversal. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages1 packages

▶CVEListV5tenda/i121.0.0.11(3862)

🔴Vulnerability Details

2
GHSA
GHSA-22fp-cvvv-7ff5: A vulnerability was determined in Tenda i12 1↗2026-04-09
▶
CVEList
Tenda i12 HTTP path traversal↗2026-04-09
▶