W18E vulnerabilities

CVEs whose affected-version data names the W18E package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-118238High· 7.2PoC

1w ago

CVE-2026-118238

The Tenda W18E web management server is vulnerable to OS command injection via the "diagnose" packet-capture feature due to improper validation of JSON fields. An authenticated user can inject shell metacharacters into the protocol or ta…

▾ MidnightTenda · W18EEPSS 1.5%via CVEORG