CVE-2026-30140 in W15E
Zusammenfassung
von MITRE • 09.03.2026
An incorrect access control vulnerability exists in Tenda W15E V02.03.01.26_cn. An unauthenticated attacker can access the /cgi-bin/DownloadCfg/RouterCfm.jpg endpoint to download the configuration file containing plaintext administrator credentials, leading to sensitive information disclosure and potential remote administrative access.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.