CVE-2026-24429

CWE-13933 documents3 sources
Severity
9.3CRITICAL
EPSS
0.1%
top 69.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Shenzhen Tenda Technology Co., Ltd. W30e V2Tenda W30e Firmware
Timeline
PublishedJan 26

Description

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) ship with a predefined default password for a built-in authentication account that is not required to be changed during initial configuration. An attacker can leverage these default credentials to gain authenticated access to the management interface.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

▶NVDtenda/w30e_firmware16.01.0.19\(5037\)

🔴Vulnerability Details

2
CVEList
Tenda W30E V2 Hardcoded Default Password for Built-in Account↗2026-01-26
▶
GHSA
GHSA-xwmm-qmxv-wfh3: Shenzhen Tenda W30E V2 firmware versions up to and including V16↗2026-01-26
▶
CVE-2026-24429 (CRITICAL CVSS 9.3) | Shenzhen Tenda W30E V2 firmware ver | cvebase.io