<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: shenzhen-tenda-technology-co-ltd-w30e-v2</title><description>Every new CVE for shenzhen-tenda-technology-co-ltd-w30e-v2.</description><link>https://agentprime.io/</link><item><title>CVE-2026-24435: Tenda W30E V2 Permissive CORS Allows Cross-origin Data Access</title><link>https://agentprime.io/advisories/CVE-2026-24435/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24435/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Jan 2026 17:49:03 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-24439: Tenda W30E V2 Lacks X-Content-Type-Options Header</title><link>https://agentprime.io/advisories/CVE-2026-24439/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24439/</guid><description>CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Jan 2026 17:48:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-24432: Tenda W30E V2 Missing CSRF Protections for Administrative Actions</title><link>https://agentprime.io/advisories/CVE-2026-24432/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24432/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Jan 2026 17:46:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-24433: Tenda W30E V2 Stored XSS via Username Field</title><link>https://agentprime.io/advisories/CVE-2026-24433/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24433/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Jan 2026 17:40:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-24431: Tenda W30E V2 Web UI Reveals Passwords in Cleartext</title><link>https://agentprime.io/advisories/CVE-2026-24431/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24431/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Jan 2026 17:40:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-24437: Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages</title><link>https://agentprime.io/advisories/CVE-2026-24437/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24437/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Jan 2026 17:40:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-24436: Tenda W30E V2 Lacks Rate Limiting on Authentication</title><link>https://agentprime.io/advisories/CVE-2026-24436/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24436/</guid><description>CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Jan 2026 17:40:04 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-24428: Tenda W30E V2 Incorrect Authorization Allows Administrator Password Change</title><link>https://agentprime.io/advisories/CVE-2026-24428/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24428/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Jan 2026 17:39:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-24430: Tenda W30E V2 HTTP Responses Expose Plaintext Credentials</title><link>https://agentprime.io/advisories/CVE-2026-24430/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24430/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Jan 2026 17:39:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-24429: Tenda W30E V2 Hardcoded Default Password for Built-in Account</title><link>https://agentprime.io/advisories/CVE-2026-24429/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24429/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Jan 2026 17:39:02 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-24440: Tenda W30E V2 Allows Password Changes Without Verifying Current Password</title><link>https://agentprime.io/advisories/CVE-2026-24440/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24440/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Jan 2026 17:38:44 GMT</pubDate><category>CVE</category></item></channel></rss>