CVE-2026-24430: Tenda W30E V2 HTTP Responses Expose Plaintext Credentials
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) disclose sensitive account credentials in cleartext within HTTP responses generated by the maintenance interface. Because the management interface is accessible over unencrypted HTTP by default, credentials may be exposed to network-based interception.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-24430?
CVE-2026-24430 is classified with a significant severity level due to the exposure of plaintext credentials in HTTP responses.
How do I fix CVE-2026-24430?
To mitigate CVE-2026-24430, upgrade your Tenda W30E V2 firmware to a version higher than 16.01.0.19(5037).
What devices are affected by CVE-2026-24430?
CVE-2026-24430 affects the Tenda W30E V2 devices running firmware versions up to and including 16.01.0.19(5037).
What type of information is exposed by CVE-2026-24430?
CVE-2026-24430 exposes sensitive account credentials in cleartext within the HTTP responses from the maintenance interface.
How can I prevent exploitation of CVE-2026-24430?
Prevent exploitation of CVE-2026-24430 by securing your network and ensuring that the management interface is not exposed publicly.