EUVD-2026-24162

Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the dopingaction function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2026-38834: Improper Neutralization of Special Elements used in a Command

Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the dopingaction function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2026-38834

Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the dopingaction function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2026-38834

The Tenda W30E V2.0 router, specifically version V16.01.0.21 , is susceptible to a command injection vulnerability. The flaw exists within the do_ping_action function due to improper validation of the hostName parameter. An unauthenticated attacker can exploit this by sending a crafted request to...