CVE-2024-46434: Tenda w18e Firmware

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Tenda W18E V16.01.0.8(1625) suffers from authentication bypass in the web management portal allowing an unauthorized remote attacker to gain administrative access by sending a specially crafted HTTP request.

Affected products

• Tenda w18e Firmware: version 16.01.0.8(1625) only

Published 2025-02-10. Last modified 2026-06-17.