Tenda w30e
This hub aggregates every CVE we track for Tenda w30e, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.
26
CVEs tracked
9
Critical
10
High
0
In CISA KEV
Severity distribution
HIGH10CRITICAL9MEDIUM7
Monthly trend
0
0
0
0
0
0
0
0
0
0
0
2
0
0
0
11
0
0
1
0
0
0
0
0
2024-102026-09
Latest CVEs
The 15 most recently published vulnerabilities affecting Tenda w30e.
- CVE-2026-38835Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the formSetUSBPartitionUmount function via the usbPartitionName parameter. This vulnerability allows attackers ...9.8
- CVE-2026-24435Tenda W30E V2 Permissive CORS Allows Cross-origin Data Access6.5
- CVE-2026-24439Tenda W30E V2 Lacks X-Content-Type-Options Header6.5
- CVE-2026-24432Tenda W30E V2 Missing CSRF Protections for Administrative Actions4.3
- CVE-2026-24433Tenda W30E V2 Stored XSS via Username Field5.4
- CVE-2026-24431Tenda W30E V2 Web UI Reveals Passwords in Cleartext6.5
- CVE-2026-24437Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages5.5
- CVE-2026-24436Tenda W30E V2 Lacks Rate Limiting on Authentication9.8
- CVE-2026-24428Tenda W30E V2 Incorrect Authorization Allows Administrator Password Change8.8
- CVE-2026-24430Tenda W30E V2 HTTP Responses Expose Plaintext Credentials7.5
- CVE-2026-24429Tenda W30E V2 Hardcoded Default Password for Built-in Account9.8
- CVE-2026-24440Tenda W30E V2 Allows Password Changes Without Verifying Current Password8.8
- CVE-2025-57085Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a...9.8
- CVE-2025-57086Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the String parameter in the formDeleteMeshNode function. This vulnerability allows attackers to cause a Denial of Service...7.5
- CVE-2024-4171Tenda W30E WizardHandle fromWizardHandle stack-based overflow8.8
Product normalization is registry-driven with AI assist and human review. How it works