CVE-2026-5849 in i12

Riassunto

di MITRE • 09/04/2026

A vulnerability was determined in Tenda i12 1.0.0.11(3862). The impacted element is an unknown function of the component HTTP Handler. Executing a manipulation can lead to path traversal. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsabile: VulDB
• Divulgazione: 09/04/2026
• Moderazione: accettato
• Voce: VDB-356375
• CPE: pronto
• CWE: CWE-22 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.3 (VulDB)
• EPSS: 0.00632
• KEV: no
• Attività: molto basso
• Settore: Hospital, Government, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-5849
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-5849
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-5849/