CNNVD-202601-4347 Information

CNNVD ID

CNNVD-202601-4347

CVE-2026-24437

  • CNNVD Published: 2026-01-26

Description (Chinese)

Tenda W30E是中国腾达(Tenda)公司的一款路由器。 Tenda W30E V2 V16.01.0.19(5037)及之前版本存在安全漏洞,该漏洞源于缺少适当的缓存控制指令,可能导致浏览器本地存储凭据响应。

Description (English)

Tenda W30E is a router for Tenda China. There is a security loophole in Tenda W30E V2 V16.01.19 (5037) and earlier versions, which stems from the lack of proper cache control instructions, which may lead to a browser ’ s local storage certificate response.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

腾达

Published

2026-01-26

Last Modified

2026-02-24

References

https://www.vulncheck.com/advisories/tenda-w30e-v2-missing-cache-controls-for-credential-bearing-pages https://www.tendacn.com/product/W30E https://access.redhat.com/security/cve/cve-2026-24437

Share on: