Shenzhen Tenda Technology Co., Ltd. W30E V2

• CVE-2026-24435 High 7.1 Tenda W30E V2 Permissive CORS Allows Cross-origin Data Access 0.2%
• CVE-2026-24439 Low 2.1 Tenda W30E V2 Lacks X-Content-Type-Options Header 0.2%
• CVE-2026-24432 Medium 5.1 Tenda W30E V2 Missing CSRF Protections for Administrative Actions 0.1%
• CVE-2026-24433 Medium 5.1 Tenda W30E V2 Stored XSS via Username Field 0.2%
• CVE-2026-24431 High 7.1 Tenda W30E V2 Web UI Reveals Passwords in Cleartext 0.2%
• CVE-2026-24437 Medium 4.8 Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages 0.2%
• CVE-2026-24436 Critical 9.2 Tenda W30E V2 Lacks Rate Limiting on Authentication 0.5%
• CVE-2026-24428 High 8.7 Tenda W30E V2 Incorrect Authorization Allows Administrator Password Change 0.3%
• CVE-2026-24430 High 8.2 Tenda W30E V2 HTTP Responses Expose Plaintext Credentials 0.3%
• CVE-2026-24429 Critical 9.3 Tenda W30E V2 Hardcoded Default Password for Built-in Account 0.4%
• CVE-2026-24440 High 8.7 Tenda W30E V2 Allows Password Changes Without Verifying Current Password 0.3%