EUVD-2026-24162

Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the dopingaction function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2026-38834

Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the dopingaction function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2026-38834

CVE-2026-38834 affects Tenda W30E V2.0 with firmware 16.01.0.21. A command injection vulnerability exists in the do_ping_action function via the hostName parameter, allowing execution of arbitrary commands with crafted requests. The vulnerability is tied to the specific function and parameter, wi...