CVE-2026-38835

The Tenda W30E V2.0 router, specifically version V16.01.0.21 , contains a command injection vulnerability within the formSetUSBPartitionUmount function. The root cause is the failure to properly neutralize special elements during the processing of the usbPartitionName parameter. A remote attacker...