CVE-2026-6024 is a high severity (CVSS 7.3) path traversal in the HTTP handler of the Tenda i6 access point, firmware 1.0.0.7(2204). The record says the exploit is public and names no fixed firmware. Restrict access to the web interface, check Tenda for an update, and plan a replacement.
What's affected
- Product: Tenda i6 and its firmware, version 1.0.0.7(2204).
- Affected function:
R7WebsSecurityHandlerfunctionin the HTTP handler. - Fixed: none confirmed in the record. Check the vendor's support page for newer firmware.
- Weakness: CWE-22, path traversal. CVSS 7.3 (high), vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.
How to check if you're exposed
Log in to the device's admin page and read the firmware version on the status or system page. Anything reporting 1.0.0.7(2204) is in range.
Then ask where the web interface is reachable from. From a machine on each network segment, check whether the admin port answers:
curl -sI http://DEVICE_IP/ | head -n 5
Replace DEVICE_IP with the device address. If it answers from user networks or the internet, that exposure is the first thing to fix.
What to do now
- List every Tenda i6 in your estate and its firmware version.
- Check Tenda's support site for newer firmware. The record names none.
- Limit the web management interface to a trusted management network, and turn off remote administration from the internet.
- Change the admin password if it is a default or shared one.
- If no fix appears, schedule replacement of the device.
Why it matters
Path traversal lets a request reach files outside the folder a web server is meant to serve, by abusing special path sequences. On a small network device the web interface runs with high privilege, so a file read or write there can matter a lot.
The record says the exploit is public and the attack can be started remotely with no login. It does not say attacks are underway, and the KEV flag is false. Consumer and small business gear often gets few patches, so reducing exposure and planning a replacement are sound defaults.
Quick check
Is a patched firmware available?
The record names none. Check Tenda's site.
What is the quickest risk reduction?
Make sure the admin interface is not reachable from the internet or from untrusted segments.
Sources
- VulDB entry (listed in the record)
- Tenda (vendor site, listed in the record)
Last reviewed: 19 October 2026.
