https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T14:05:40.968265+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-24432 CVE-2026-24432 — Tenda W30E V2 Missing CSRF Protections for Administrative Actions 2026-10-08T14:05:40.969749+00:00

Affected: Shenzhen Tenda Technology Co., Ltd. W30E V2

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) lack cross-site request forgery (CSRF) protections on administrative endpoints, including those used to change administrator account credentials. As a result, an attacker can craft malicious requests that, when triggered by an authenticated user’s browser, modify administrative passwords and other configuration settings.