CVE-2025-57086: Tenda w30e Firmware

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the String parameter in the formDeleteMeshNode function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.

Affected products

• Tenda w30e Firmware: up to and including 16.01.0.19\(5037\)

Published 2025-09-09. Last modified 2026-06-17.