CVE-2026-24428 | Tenda W30E V2 up to 16.01.0.19(5037) User Management API authorization

A vulnerability was found in Tenda W30E V2 up to 16.01.0.19(5037) and classified as very critical. Affected by this vulnerability is an unknown functionality of the component User Management API. Executing a manipulation can lead to incorrect authorization.

This vulnerability is tracked as CVE-2026-24428. The attack can be launched remotely. No exploit exists.