Login Request a demo
WF
Product
W30e Firmware
by Tenda · last CVE Apr 21, 2026
63
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities63In the news0Timeline
Severity mix
Critical 18High 36Medium 9Low 0
Severity
All severities63Critical18High36Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add W30e Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-32290
6.7
1%
Apr 17
Tenda W30E v1.0 v1.0.1.25(633) firmware has a stack overflow vulnerability via the page parameter in the fromAddressNat function
Affected: 1.0.1.25(633)
CVE-2026-24435
6.5
0%
Jan 26
Tenda W30E V2 Permissive CORS Allows Cross-origin Data Access
Affected: through 16.01.0.19\(5037\)
CVE-2026-24439
6.5
0%
Jan 26
Tenda W30E V2 Lacks X-Content-Type-Options Header
Affected: through 16.01.0.19\(5037\)
CVE-2026-24431
6.5
0%
Jan 26
Tenda W30E V2 Web UI Reveals Passwords in Cleartext
Affected: through 16.01.0.19\(5037\)
CVE-2024-32287
6.5
1%
Apr 17
Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the qos parameter in the fromqossetting function
Affected: 1.0.1.25(633)
CVE-2024-32288
6.3
0%
Apr 17
Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability located via the page parameter in the fromwebExcptypemanFilter function
Affected: 1.0.1.25(633)
CVE-2026-24437
5.5
0%
Jan 26
Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages
Affected: through 16.01.0.19\(5037\)
CVE-2026-24433
5.4
0%
Jan 26
Tenda W30E V2 Stored XSS via Username Field
Affected: through 16.01.0.19\(5037\)
CVE-2026-24432
4.3
0%
Jan 26
Tenda W30E V2 Missing CSRF Protections for Administrative Actions
Affected: through 16.01.0.19\(5037\)
Showing 9