Untriaged
Permalink
CVE-2026-5962
7.3 HIGH
- CVSS version: 3.1
- Attack vector (AV):
- Attack complexity (AC):
- Privileges required (PR):
- User interaction (UI):
- Scope (S):
- Confidentiality impact (C):
- Integrity impact (I):
- Availability impact (A):
Tenda CH22 httpd R7WebsSecurityHandlerfunction path traversal
A vulnerability was detected in Tenda CH22 1.0.0.6(468). This issue affects the function R7WebsSecurityHandlerfunction of the component httpd. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used.
References
-
VDB-356515 | Tenda CH22 httpd R7WebsSecurityHandlerfunction path traversal vdb-entrytechnical-description
-
-
Submit #791277 | Tenda CH22 V1.0.0.6(468) Path Traversal third-party-advisory
-
https://www.tenda.com.cn/ product
Affected products
CH22
- ==1.0.0.6(468)
Matching in nixpkgs
pkgs.python312Packages.pycatch22
Python implementation of catch22
-
nixos-25.11 pycatch22-0.4.5
- nixos-25.11-small pycatch22-0.4.5
- nixpkgs-25.11-darwin pycatch22-0.4.5
pkgs.python313Packages.pycatch22
Python implementation of catch22
-
nixos-unstable pycatch22-0.4.5
- nixpkgs-unstable pycatch22-0.4.5
- nixos-unstable-small pycatch22-0.4.5
-
nixos-25.11 pycatch22-0.4.5
- nixos-25.11-small pycatch22-0.4.5
- nixpkgs-25.11-darwin pycatch22-0.4.5
pkgs.python314Packages.pycatch22
Python implementation of catch22
-
nixos-unstable pycatch22-0.4.5
- nixpkgs-unstable pycatch22-0.4.5
- nixos-unstable-small pycatch22-0.4.5
Package maintainers
-
@mbalatsko Maksym Balatsko <mbalatsko@gmail.com>