Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-24440

Tenda W30E V2 Allows Password Changes Without Verifying Current Password

Description

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) allow account passwords to be changed through the maintenance interface without requiring verification of the existing password. This enables unauthorized password changes when access to the affected endpoint is obtained.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Shenzhen Tenda Technology Co., Ltd. W30E V2

Default version status: unknown

  • 0 to ≤ 16.01.0.19(5037)affected

References