CVE-2024-46436: Tenda w18e Firmware

High severity, CVSS 8.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Hardcoded credentials in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to gain root access to the device over the telnet service.

Affected products

• Tenda w18e Firmware: version 16.01.0.8(1625) only

Published 2025-02-10. Last modified 2026-06-17.