Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1310 CNY

100%
Buy Us a Coffee

W30E V2 — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in W30E V2, with AI-generated Chinese analysis, references, and POCs.

Vendor: Shenzhen Tenda Technology Co., Ltd.

CVE IDTitleCVSSSeverityPublished
CVE-2026-24435 Tenda W30E V2 Permissive CORS Allows Cross-origin Data Access CWE-942 8.1AIHighAI2026-01-26
CVE-2026-24439 Tenda W30E V2 Lacks X-Content-Type-Options Header CWE-116 9.4AICriticalAI2026-01-26
CVE-2026-24432 Tenda W30E V2 Missing CSRF Protections for Administrative Actions CWE-352 8.8AIHighAI2026-01-26
CVE-2026-24433 Tenda W30E V2 Stored XSS via Username Field CWE-79 6.1AIMediumAI2026-01-26
CVE-2026-24431 Tenda W30E V2 Web UI Reveals Passwords in Cleartext CWE-317 8.1AIHighAI2026-01-26
CVE-2026-24437 Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages CWE-525 7.1AIHighAI2026-01-26
CVE-2026-24436 Tenda W30E V2 Lacks Rate Limiting on Authentication CWE-307 9.8AICriticalAI2026-01-26
CVE-2026-24428 Tenda W30E V2 Incorrect Authorization Allows Administrator Password Change CWE-863 8.8AIHighAI2026-01-26
CVE-2026-24430 Tenda W30E V2 HTTP Responses Expose Plaintext Credentials CWE-201 7.5AIHighAI2026-01-26
CVE-2026-24429 Tenda W30E V2 Hardcoded Default Password for Built-in Account CWE-1393 9.8AICriticalAI2026-01-26
CVE-2026-24440 Tenda W30E V2 Allows Password Changes Without Verifying Current Password CWE-620 9.1AICriticalAI2026-01-26

All 11 known CVE vulnerabilities affecting W30E V2 with full Chinese analysis, references, and POCs where available.