CVE-2026-24439

CWE-1163 documents3 sources
Severity
2.1LOW
EPSS
0.0%
top 87.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Shenzhen Tenda Technology Co., Ltd. W30e V2Tenda W30e Firmware
Timeline
PublishedJan 26

Description

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) fail to include the X-Content-Type-Options: nosniff response header on web management interfaces. As a result, browsers that perform MIME sniffing may incorrectly interpret attacker-influenced responses as executable script.

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

▶NVDtenda/w30e_firmware16.01.0.19\(5037\)

🔴Vulnerability Details

2
CVEList
Tenda W30E V2 Lacks X-Content-Type-Options Header↗2026-01-26
▶
GHSA
GHSA-w69g-qrmr-3cf2: Shenzhen Tenda W30E V2 firmware versions up to and including V16↗2026-01-26
▶
CVE-2026-24439 (LOW CVSS 2.1) | Shenzhen Tenda W30E V2 firmware ver | cvebase.io