A vulnerability was found in Tenda CH22 1.0.0.6(468) and classified as critical. This issue affects the function R7WebsSecurityHandlerfunction of the component httpd. The manipulation results in path traversal.

This vulnerability is cataloged as CVE-2026-5962. The attack may be launched remotely. Furthermore, there is an exploit available.