CVE-2026-24437 - Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages

CVE ID : CVE-2026-24437 Published : Jan. 26, 2026, 6:16 p.m. | 1 hour, 28 minutes ago Description : Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) serve sensitive administrative content without appropriate cache-control directives. As a result, browsers may store credential-bearing responses locally, exposing them to subsequent unauthorized access. Severity: 4.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...