High severity7.3NVD Advisory· Published Apr 9, 2026· Updated Apr 30, 2026
CVE-2026-5849
CVE-2026-5849
Description
A vulnerability was determined in Tenda i12 1.0.0.11(3862). The impacted element is an unknown function of the component HTTP Handler. Executing a manipulation can lead to path traversal. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Affected products
1- cpe:2.3:o:tenda:i12_firmware:1.0.0.11\(3862\):*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- github.com/Litengzheng/vuldb_new/blob/main/i12/vul_110/README.mdnvdExploitThird Party Advisory
- vuldb.com/submit/791217nvdThird Party AdvisoryVDB Entry
- vuldb.com/vuln/356375nvdThird Party AdvisoryVDB Entry
- vuldb.com/vuln/356375/ctinvdPermissions RequiredVDB Entry
- www.tenda.com.cnnvdProduct
News mentions
0No linked articles in our index yet.