CVE-2026-77945: Command Injection in TRENDnet TEW-821DAP

The TRENDnet TEW-821DAP firmware version 2.2.01b05 contains a command injection vulnerability in the /cgi-bin/upload.cgi script's ssi component. By manipulating the filename argument, an attacker with low privileges can remotely execute arbitrary commands on the device without user interaction. This vulnerability is tracked as CVE-2026-77945 and has a CVSS 3.1 score of 7.4 (AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L). Public exploit code exists, but no confirmed exploitation in the wild has been documented. No vendor advisory or patch information is currently available.

Successful exploitation allows remote attackers with low privileges to execute arbitrary commands on the affected device, potentially leading to partial compromise of confidentiality, integrity, and availability. The vulnerability affects the device's CGI upload functionality and could result in system control or disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the device's management interface to trusted users only and monitor for suspicious activity related to the upload.cgi endpoint. Avoid exposing the device management interface to untrusted networks.