VYPR
Unrated severityNVD Advisory· Published Jan 26, 2026· Updated Mar 5, 2026

Tenda W30E V2 Hardcoded Default Password for Built-in Account

CVE-2026-24429

Description

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) ship with a predefined default password for a built-in authentication account that is not required to be changed during initial configuration. An attacker can leverage these default credentials to gain authenticated access to the management interface.

Affected products

2
  • Tenda/W30Ellm-fuzzy
    Range: <= V16.01.0.19(5037)
  • Shenzhen Tenda Technology Co., Ltd./W30E V2v5
    Range: 0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.