Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2026-24437

Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages

Description

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) serve sensitive administrative content without appropriate cache-control directives. As a result, browsers may store credential-bearing responses locally, exposing them to subsequent unauthorized access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Shenzhen Tenda Technology Co., Ltd. W30E V2

Default version status: unknown

  • 0 to ≤ 16.01.0.19(5037)affected

References