Description
Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the do_ping_action function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
High · 7.3
CVE-2026-38834
EUVD-2026-24162GHSA-8p5x-j4cx-8cwg
Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the do_ping_action function via the hostName paramete…
Published Apr 21, 2026 · Updated Apr 21, 2026 · Assigned by mitre