Tenda CH22 httpd R7WebsSecurityHandlerfunction Pfadüberschreitung

The Path Traversal vulnerability allows an attacker to bypass security controls and access files and directories that should be protected. Successful exploitation could lead to the disclosure of configuration files, system credentials, or other sensitive data stored on the router. Given the router's role in network connectivity, a compromised device could also be used as a pivot point for lateral movement within the internal network. The availability of a public exploit significantly increases the likelihood of widespread exploitation, potentially impacting a large number of Tenda CH22 devices.

Home users and small businesses relying on Tenda CH22 routers are at risk. Those with exposed routers on the public internet or those using default configurations are particularly vulnerable. Shared hosting environments utilizing Tenda CH22 routers for network management are also at increased risk.

• linux / server:

journalctl -u httpd | grep -i "path traversal"

• generic web:

curl -I http://<router_ip>/../../../../etc/passwd | head -n 1

1. 2026-04-09Disclosure

   disclosure

2. 2026-04-09PoC

   poc

1. Reserviert2026-04-09
2. Veröffentlicht2026-04-09
3. EPSS aktualisiert2026-04-17

The primary mitigation for CVE-2026-5962 is to upgrade the Tenda CH22 firmware to a patched version as soon as it becomes available from Tenda. Until a patch is released, consider implementing temporary workarounds such as configuring a Web Application Firewall (WAF) to block requests containing path traversal sequences (e.g., ../). Restricting access to the router's web interface from untrusted networks can also reduce the attack surface. Monitor router logs for suspicious activity, particularly requests containing unusual path characters.