CVE-2026-24430

CWE-2013 documents3 sources
Severity
8.2HIGH
EPSS
0.0%
top 85.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Shenzhen Tenda Technology Co., Ltd. W30e V2Tenda W30e Firmware
Timeline
PublishedJan 26

Description

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) disclose sensitive account credentials in cleartext within HTTP responses generated by the maintenance interface. Because the management interface is accessible over unencrypted HTTP by default, credentials may be exposed to network-based interception.

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

▶NVDtenda/w30e_firmware16.01.0.19\(5037\)

🔴Vulnerability Details

2
CVEList
Tenda W30E V2 HTTP Responses Expose Plaintext Credentials↗2026-01-26
▶
GHSA
GHSA-vw2m-ppwv-6g52: Shenzhen Tenda W30E V2 firmware versions up to and including V16↗2026-01-26
▶
CVE-2026-24430 (HIGH CVSS 8.2) | Shenzhen Tenda W30E V2 firmware ver | cvebase.io