Tenda i6 HTTP R7WebsSecurityHandlerfunction Pfadüberschreitung

The Path Traversal vulnerability in Tenda i6 allows an attacker to bypass access controls and retrieve arbitrary files from the router's file system. This could include configuration files containing sensitive credentials, firmware images, or other proprietary data. Successful exploitation could lead to complete compromise of the router, enabling the attacker to modify settings, intercept network traffic, or use the device as a launchpad for further attacks on the internal network. The publicly disclosed nature of this vulnerability increases the risk of exploitation.

Home users and small businesses relying on Tenda i6 routers are at risk. Those with exposed routers on the public internet are particularly vulnerable. Users who have not updated their router firmware regularly are also at increased risk.

• linux / server:

journalctl -u tenda_i6 | grep -i "path traversal"

• generic web:

curl -I http://<router_ip>/../../../../etc/passwd

• generic web:

 grep -r "R7WebsSecurityHandlerfunction" /var/log/nginx/access.log

1. 2026-04-10Disclosure

   disclosure

1. Reserviert2026-04-09
2. Veröffentlicht2026-04-10
3. EPSS aktualisiert2026-04-17

While a vendor patch is pending, several mitigation steps can be taken to reduce the risk. Implement a Web Application Firewall (WAF) with rules to restrict access to sensitive files and directories, specifically blocking requests containing path traversal sequences (e.g., '../'). Review and harden router configurations, ensuring strong passwords and disabling unnecessary services. Monitor router logs for suspicious activity, particularly attempts to access unusual file paths. Consider temporarily restricting access to the router's web interface from untrusted networks.