Skip to content
OpenAdvisories
Medium · 4.8 CVE-2026-24437 EUVD-2026-4664GHSA-f3h8-6qj8-rp34

Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages

Published Jan 26, 2026 · Updated May 14, 2026 · Assigned by VulnCheck

Description

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) serve sensitive administrative content without appropriate cache-control directives. As a result, browsers may store credential-bearing responses locally, exposing them to subsequent unauthorized access.

Affected products

VendorProductAffectedFixed
Shenzhen Tenda Technology W30E V2 ≤ 16.01.0.19(5037) —

References