A vulnerability, which was classified as problematic, was found in Tenda W30E V2 up to 16.01.0.19(5037). This impacts an unknown function of the component Administrative Endpoint. Such manipulation leads to permissive cross-domain policy with untrusted domains.
This vulnerability is referenced as CVE-2026-24435. It is possible to launch the attack remotely. No exploit is available.
