CVE-2026-30140 in W15E
요약
\~에 의해 MITRE • 2026. 03. 09.
An incorrect access control vulnerability exists in Tenda W15E V02.03.01.26_cn. An unauthenticated attacker can access the /cgi-bin/DownloadCfg/RouterCfm.jpg endpoint to download the configuration file containing plaintext administrator credentials, leading to sensitive information disclosure and potential remote administrative access.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.