https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T23:35:06.500554+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-00939 bdu:2026-00939 2026-10-16T23:35:06.503453+00:00 bdu:2026-00939 https://cve.radiocsirt.org/vuln/euvd-2026-318356 EUVD-2026-318356 2026-10-16T23:35:06.503492+00:00 EUVD-2026-318356 https://cve.radiocsirt.org/vuln/fkie_cve-2026-24428 fkie_cve-2026-24428 2026-10-16T23:35:06.503507+00:00

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) contain an authorization flaw in the user management API that allows a low-privileged authenticated user to change the administrator account password. By sending a crafted request directly to the backend endpoint, an attacker can bypass role-based restrictions enforced by the web interface and obtain full administrative privileges.

 https://cve.radiocsirt.org/vuln/ghsa-ww5j-8g6w-h99h GHSA-ww5j-8g6w-h99h 2026-10-16T23:35:06.503538+00:00

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) contain an authorization flaw in the user management API that allows a low-privileged authenticated user to change the administrator account password. By sending a crafted request directly to the backend endpoint, an attacker can bypass role-based restrictions enforced by the web interface and obtain full administrative privileges.