CVE-2026-24437 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) serve sensitive administrative content without appropriate cache-control directiv…
Medium CVSS: 4.8

CVE-2026-24437

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) serve sensitive administrative content without appropriate cache-control directives. As a result, browsers may store credential-bearing responses locally, exposing them to subsequent unauthorized access.
Vendor
Tenda
Product
W30e Firmware
CWE
CWE-525
Yayın Tarihi
2026-01-26 18:16:41
Güncelleme
2026-01-28 19:49:11
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-525 W30e Firmware MEDIUM Tenda 2026

Referanslar

https://www.tendacn.com/product/W30E https://www.vulncheck.com/advisories/tenda-w30e-v2-missing-cache-controls-for-credential-bearing-pages