A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05. (CVE-2026-77945)
A command injection vulnerability exists in the TRENDnet TEW-821DAP device firmware version 2.2.01b05. The issue occurs in an unknown function within the /cgi-bin/upload.cgi file's ssi component, where manipulation of the filename argument can lead to remote command execution. The vulnerability has a CVSS 3.1 base score of 7.4, indicating a high-severity impact on confidentiality, integrity, and availability. Exploit code has been publicly disclosed, but no known active exploitation in the wild has been reported. No patch or official remediation information is currently available.
AI Analysis
Technical Summary
The TRENDnet TEW-821DAP firmware version 2.2.01b05 contains a command injection vulnerability in the /cgi-bin/upload.cgi script's ssi component. By manipulating the filename argument, an attacker with low privileges can remotely execute arbitrary commands on the device without user interaction. This vulnerability is tracked as CVE-2026-77945 and has a CVSS 3.1 score of 7.4 (AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L). Public exploit code exists, but no confirmed exploitation in the wild has been documented. No vendor advisory or patch information is currently available.
Potential Impact
Successful exploitation allows remote attackers with low privileges to execute arbitrary commands on the affected device, potentially leading to partial compromise of confidentiality, integrity, and availability. The vulnerability affects the device's CGI upload functionality and could result in system control or disruption.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the device's management interface to trusted users only and monitor for suspicious activity related to the upload.cgi endpoint. Avoid exposing the device management interface to untrusted networks.
A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05. (CVE-2026-77945)
Description
A command injection vulnerability exists in the TRENDnet TEW-821DAP device firmware version 2.2.01b05. The issue occurs in an unknown function within the /cgi-bin/upload.cgi file's ssi component, where manipulation of the filename argument can lead to remote command execution. The vulnerability has a CVSS 3.1 base score of 7.4, indicating a high-severity impact on confidentiality, integrity, and availability. Exploit code has been publicly disclosed, but no known active exploitation in the wild has been reported. No patch or official remediation information is currently available.
CVSS v3.1
Score 7.4high
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The TRENDnet TEW-821DAP firmware version 2.2.01b05 contains a command injection vulnerability in the /cgi-bin/upload.cgi script's ssi component. By manipulating the filename argument, an attacker with low privileges can remotely execute arbitrary commands on the device without user interaction. This vulnerability is tracked as CVE-2026-77945 and has a CVSS 3.1 score of 7.4 (AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L). Public exploit code exists, but no confirmed exploitation in the wild has been documented. No vendor advisory or patch information is currently available.
Potential Impact
Successful exploitation allows remote attackers with low privileges to execute arbitrary commands on the affected device, potentially leading to partial compromise of confidentiality, integrity, and availability. The vulnerability affects the device's CGI upload functionality and could result in system control or disruption.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the device's management interface to trusted users only and monitor for suspicious activity related to the upload.cgi endpoint. Avoid exposing the device management interface to untrusted networks.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-399f-4wg3-w73h
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-77945"]
- Ecosystems
- []
- Database Specific Severity
- LOW
- Cvss Version
- 3.1
Threat ID: 6a89a6c6acd9273b49150a91
Added to database: 08/22/2026, 13:40:22 UTC
Last enriched: 08/22/2026, 13:41:18 UTC
Last updated: 08/22/2026, 13:41:18 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.