WV
Product
W30E V2
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 6Low 0
Watch
Add W30E V2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24436 | 9.8 | Jan 26 | Tenda W30E V2 Lacks Rate Limiting on Authentication Affected: through 16.01.0.19(5037) |
| CVE-2026-24429 | 9.8 | Jan 26 | Tenda W30E V2 Hardcoded Default Password for Built-in Account Affected: through 16.01.0.19(5037) |
| CVE-2026-24428 | 8.8 | Jan 26 | Tenda W30E V2 Incorrect Authorization Allows Administrator Password Change Affected: through 16.01.0.19(5037) |
| CVE-2026-24440 | 8.8 | Jan 26 | Tenda W30E V2 Allows Password Changes Without Verifying Current Password Affected: through 16.01.0.19(5037) |
| CVE-2026-24430 | 7.5 | Jan 26 | Tenda W30E V2 HTTP Responses Expose Plaintext Credentials Affected: through 16.01.0.19(5037) |
| CVE-2026-24435 | 6.5 | Jan 26 | Tenda W30E V2 Permissive CORS Allows Cross-origin Data Access Affected: through 16.01.0.19(5037) |
| CVE-2026-24439 | 6.5 | Jan 26 | Tenda W30E V2 Lacks X-Content-Type-Options Header Affected: through 16.01.0.19(5037) |
| CVE-2026-24431 | 6.5 | Jan 26 | Tenda W30E V2 Web UI Reveals Passwords in Cleartext Affected: through 16.01.0.19(5037) |
| CVE-2026-24437 | 5.5 | Jan 26 | Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages Affected: through 16.01.0.19(5037) |
| CVE-2026-24433 | 5.4 | Jan 26 | Tenda W30E V2 Stored XSS via Username Field Affected: through 16.01.0.19(5037) |
| CVE-2026-24432 | 4.3 | Jan 26 | Tenda W30E V2 Missing CSRF Protections for Administrative Actions Affected: through 16.01.0.19(5037) |
Showing 11