High severity8.8NVD Advisory· Published Jan 26, 2026· Updated Jun 17, 2026
CVE-2026-24440
CVE-2026-24440
Description
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) allow account passwords to be changed through the maintenance interface without requiring verification of the existing password. This enables unauthorized password changes when access to the affected endpoint is obtained.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
2- www.vulncheck.com/advisories/tenda-w30e-v2-allows-password-change-without-verifying-current-passwordnvdThird Party Advisory
- www.tendacn.com/product/W30EnvdProduct
News mentions
0No linked articles in our index yet.