CVE-2026-24107 PUBLISHED

Assigner: mitre
Reserved: 21.01.2026 Published: 02.03.2026 Updated: 02.03.2026

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Failure to validate the value of usbPartitionName, which is directly used in doSystemCmd, may lead to critical command injection vulnerabilities.

Product Status

Vendor n/a
Product n/a
Versions
  • Version n/a is affected

References

Problem Types

  • n/a text