WV
Product
W30E V2
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 6Low 0
Watch
Add W30E V2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24435 | 6.5 | Jan 26 | Tenda W30E V2 Permissive CORS Allows Cross-origin Data Access Affected: through 16.01.0.19(5037) |
| CVE-2026-24439 | 6.5 | Jan 26 | Tenda W30E V2 Lacks X-Content-Type-Options Header Affected: through 16.01.0.19(5037) |
| CVE-2026-24431 | 6.5 | Jan 26 | Tenda W30E V2 Web UI Reveals Passwords in Cleartext Affected: through 16.01.0.19(5037) |
| CVE-2026-24437 | 5.5 | Jan 26 | Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages Affected: through 16.01.0.19(5037) |
| CVE-2026-24433 | 5.4 | Jan 26 | Tenda W30E V2 Stored XSS via Username Field Affected: through 16.01.0.19(5037) |
| CVE-2026-24432 | 4.3 | Jan 26 | Tenda W30E V2 Missing CSRF Protections for Administrative Actions Affected: through 16.01.0.19(5037) |
Showing 6