← All credits
Kazuma Matsumoto, a security researcher at GMO Cybersecurity by IERAE, Inc.
82 vulnerability records and advisories credit this contributor.
CVE-2026-24441
Tenda AC7 Transmits Admin Credentials Without HTTPS Protection
CVE-2026-24440
Tenda W30E V2 Allows Password Changes Without Verifying Current Password
CVE-2026-24437
Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages
CVE-2026-24436
Tenda W30E V2 Lacks Rate Limiting on Authentication
CVE-2026-24435
Tenda W30E V2 Permissive CORS Allows Cross-origin Data Access
CVE-2026-24434
Tenda AC7 Web Interface Lacks CSRF Protections for Admin Actions
CVE-2026-24433
Tenda W30E V2 Stored XSS via Username Field
CVE-2026-24432
Tenda W30E V2 Missing CSRF Protections for Administrative Actions
CVE-2026-24431
Tenda W30E V2 Web UI Reveals Passwords in Cleartext
CVE-2026-24430
Tenda W30E V2 HTTP Responses Expose Plaintext Credentials