# Shenzhen Tenda Technology Co., Ltd. W30E V2.

Every CVE that names Shenzhen Tenda Technology Co., Ltd. W30E V2 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Tenda W30E V2 Permissive CORS Allows Cross-origin Data Access](https://agentprime.io/advisories/CVE-2026-24435.md)
  `CVE-2026-24435` · CVE record: Shenzhen Tenda Technology Co., Ltd. W30E V2 · CVSS 7.1 High · Not analysed yet · Published 26 Jan 2026 · Tags: CWE-942
- [Tenda W30E V2 Lacks X-Content-Type-Options Header](https://agentprime.io/advisories/CVE-2026-24439.md)
  `CVE-2026-24439` · CVE record: Shenzhen Tenda Technology Co., Ltd. W30E V2 · CVSS 2.1 Low · Not analysed yet · Published 26 Jan 2026 · Tags: CWE-116
- [Tenda W30E V2 Missing CSRF Protections for Administrative Actions](https://agentprime.io/advisories/CVE-2026-24432.md)
  `CVE-2026-24432` · CVE record: Shenzhen Tenda Technology Co., Ltd. W30E V2 · CVSS 5.1 Medium · Not analysed yet · Published 26 Jan 2026 · Tags: Cross-site request forgery (CSRF)
- [Tenda W30E V2 Stored XSS via Username Field](https://agentprime.io/advisories/CVE-2026-24433.md)
  `CVE-2026-24433` · CVE record: Shenzhen Tenda Technology Co., Ltd. W30E V2 · CVSS 5.1 Medium · Not analysed yet · Published 26 Jan 2026 · Tags: Cross-site scripting (XSS)
- [Tenda W30E V2 Web UI Reveals Passwords in Cleartext](https://agentprime.io/advisories/CVE-2026-24431.md)
  `CVE-2026-24431` · CVE record: Shenzhen Tenda Technology Co., Ltd. W30E V2 · CVSS 7.1 High · Not analysed yet · Published 26 Jan 2026 · Tags: CWE-317
- [Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages](https://agentprime.io/advisories/CVE-2026-24437.md)
  `CVE-2026-24437` · CVE record: Shenzhen Tenda Technology Co., Ltd. W30E V2 · CVSS 4.8 Medium · Not analysed yet · Published 26 Jan 2026 · Tags: CWE-525
- [Tenda W30E V2 Lacks Rate Limiting on Authentication](https://agentprime.io/advisories/CVE-2026-24436.md)
  `CVE-2026-24436` · CVE record: Shenzhen Tenda Technology Co., Ltd. W30E V2 · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Jan 2026 · Tags: Authentication bypass
- [Tenda W30E V2 Incorrect Authorization Allows Administrator Password Change](https://agentprime.io/advisories/CVE-2026-24428.md)
  `CVE-2026-24428` · CVE record: Shenzhen Tenda Technology Co., Ltd. W30E V2 · CVSS 8.7 High · Not analysed yet · Published 26 Jan 2026 · Tags: Broken access control
- [Tenda W30E V2 HTTP Responses Expose Plaintext Credentials](https://agentprime.io/advisories/CVE-2026-24430.md)
  `CVE-2026-24430` · CVE record: Shenzhen Tenda Technology Co., Ltd. W30E V2 · CVSS 8.2 High · Not analysed yet · Published 26 Jan 2026 · Tags: Information disclosure
- [Tenda W30E V2 Hardcoded Default Password for Built-in Account](https://agentprime.io/advisories/CVE-2026-24429.md)
  `CVE-2026-24429` · CVE record: Shenzhen Tenda Technology Co., Ltd. W30E V2 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Jan 2026 · Tags: CWE-1393
- [Tenda W30E V2 Allows Password Changes Without Verifying Current Password](https://agentprime.io/advisories/CVE-2026-24440.md)
  `CVE-2026-24440` · CVE record: Shenzhen Tenda Technology Co., Ltd. W30E V2 · CVSS 8.7 High · Not analysed yet · Published 26 Jan 2026 · Tags: CWE-620

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=shenzhen-tenda-technology-co-ltd-w30e-v2>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/shenzhen-tenda-technology-co-ltd-w30e-v2/>. Everything for agents: <https://agentprime.io/llms.txt>.