CVE-2026-24431 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) display stored user account passwords in plaintext within the administrative web…
High CVSS: 7.1

CVE-2026-24431

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) display stored user account passwords in plaintext within the administrative web interface. Any user with access to the affected management pages can directly view credentials.
Vendor
Tenda
Product
W30e Firmware
CWE
CWE-317
Yayın Tarihi
2026-01-26 18:16:40
Güncelleme
2026-01-28 20:14:45
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-317 W30e Firmware HIGH Tenda 2026

Referanslar

https://www.tendacn.com/product/W30E https://www.vulncheck.com/advisories/tenda-w30e-v2-missing-csrf-protections-for-administrative-actions