What’s Vulnerable › Products

Shenzhen Tenda Technology Co., Ltd. W30E V2 vulnerabilities

63 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 17 published in the last 12 months.

Check whether your Shenzhen Tenda Technology Co., Ltd. W30E V2 version is affected

Latest Shenzhen Tenda Technology Co., Ltd. W30E V2 vulnerabilities

• CVE-2026-38835 — (CVSS 9.8)
• CVE-2026-38834 — (CVSS 7.3)
• CVE-2026-24440 — Tenda W30E V2 Allows Password Changes Without Verifying Current Password (CVSS 8.8)
• CVE-2026-24439 — Tenda W30E V2 Lacks X-Content-Type-Options Header (CVSS 6.5)
• CVE-2026-24437 — Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages (CVSS 5.5)
• CVE-2026-24436 — Tenda W30E V2 Lacks Rate Limiting on Authentication (CVSS 9.8)
• CVE-2026-24435 — Tenda W30E V2 Permissive CORS Allows Cross-origin Data Access (CVSS 6.5)
• CVE-2026-24433 — Tenda W30E V2 Stored XSS via Username Field (CVSS 5.4)
• CVE-2026-24432 — Tenda W30E V2 Missing CSRF Protections for Administrative Actions (CVSS 4.3)
• CVE-2026-24431 — Tenda W30E V2 Web UI Reveals Passwords in Cleartext (CVSS 6.5)
• CVE-2026-24430 — Tenda W30E V2 HTTP Responses Expose Plaintext Credentials (CVSS 7.5)
• CVE-2026-24429 — Tenda W30E V2 Hardcoded Default Password for Built-in Account (CVSS 9.8)
• CVE-2026-24428 — Tenda W30E V2 Incorrect Authorization Allows Administrator Password Change (CVSS 8.8)
• CVE-2025-57086 — (CVSS 7.5)
• CVE-2025-57085 — (CVSS 9.8)
• CVE-2025-57087 — (CVSS 7.5)
• CVE-2024-52789 — (CVSS 8.0)
• CVE-2024-4171 — Tenda W30E WizardHandle fromWizardHandle stack-based overflow (CVSS 8.8)
• CVE-2024-32293 — (CVSS 8.0)
• CVE-2024-32292 — (CVSS 8.8)
• CVE-2024-32291 — (CVSS 7.5)
• CVE-2024-32290 — (CVSS 6.7)
• CVE-2024-32288 — (CVSS 6.3)
• CVE-2024-32287 — (CVSS 6.5)
• CVE-2024-32286 — (CVSS 9.8)