CVE-2026-24439 - Tenda W30E V2 Lacks X-Content-Type-Options Header

CVE ID : CVE-2026-24439 Published : Jan. 26, 2026, 6:16 p.m. | 1 hour, 28 minutes ago Description : Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) fail to include the X-Content-Type-Options: nosniff response header on web management interfaces. As a result, browsers that perform MIME sniffing may incorrectly interpret attacker-influenced responses as executable script. Severity: 2.1 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...