CVE-2026-24436 - Tenda W30E V2 Lacks Rate Limiting on Authentication

CVE ID : CVE-2026-24436 Published : Jan. 26, 2026, 6:16 p.m. | 1 hour, 28 minutes ago Description : Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) do not enforce rate limiting or account lockout mechanisms on authentication endpoints. This allows attackers to perform unrestricted brute-force attempts against administrative credentials. Severity: 9.2 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...