CVE-2026-24429CRITICAL 9.8EPSS p28.7%

CVE-2026-24429CVE-2026-24429

Description

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) ship with a predefined default password for a built-in authentication account that is not required to be changed during initial configuration. An attacker can leverage these default credentials to gain authenticated access to the management interface.

Scoring

CVSS 3.19.8 (CRITICAL)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS0.37% probability of exploitation · percentile 28.7% · 2026-06-19T12:03:05Z
Published2026-01-26
Last modified2026-01-29

Underlying weaknesses· 1

CWE-1393

References

  1. https://www.tendacn.com/product/W30E
  2. https://www.vulncheck.com/advisories/tenda-w30e-v2-hardcoded-default-password-for-built-in-account

1

TypeTargetConfidenceTier
WeaknessUse of Default Passwordcwe-13930%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-24428
CVE
CVE-2026-24440
CVE
CVE-2026-24436
CVE
CVE-2025-70802
CVE
CVE-2025-46627
CVE
CVE-2025-70798
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.