CVE-2026-10060: Command Injection in TRENDnet TEW-432BRP
A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. This impacts the function formSetRoute of the file /goform/formSetRoute. The manipulation of the argument ip/mask/gateway leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.
AI Analysis
Technical Summary
The TRENDnet TEW-432BRP router version 3.10B20 contains a command injection vulnerability in the /goform/formSetRoute endpoint. By manipulating the input parameters ip, mask, or gateway, an attacker can inject and execute arbitrary commands remotely. The product has been EOL for over 15 years, and the vendor has stated they cannot replicate or fix the issue. No official remediation or patch is available. The vulnerability is publicly disclosed and carries a CVSS 4.0 score of 5.3 (medium severity).
Potential Impact
Successful exploitation allows remote command execution on the affected device, potentially leading to unauthorized control or disruption of the router. Since the device is no longer supported and unpatched, affected users remain vulnerable if the device is still in use. No known exploits in the wild have been reported to date.
Mitigation Recommendations
No official fix or patch is available due to the product being end-of-life since 2009. Users are advised to discontinue use of the affected device and replace it with a supported model. Network-level mitigations such as restricting remote access to the device may reduce exposure but do not eliminate the vulnerability.
CVE-2026-10060: Command Injection in TRENDnet TEW-432BRP
Description
A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. This impacts the function formSetRoute of the file /goform/formSetRoute. The manipulation of the argument ip/mask/gateway leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.
CVSS v4.0
Score 5.3medium
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The TRENDnet TEW-432BRP router version 3.10B20 contains a command injection vulnerability in the /goform/formSetRoute endpoint. By manipulating the input parameters ip, mask, or gateway, an attacker can inject and execute arbitrary commands remotely. The product has been EOL for over 15 years, and the vendor has stated they cannot replicate or fix the issue. No official remediation or patch is available. The vulnerability is publicly disclosed and carries a CVSS 4.0 score of 5.3 (medium severity).
Potential Impact
Successful exploitation allows remote command execution on the affected device, potentially leading to unauthorized control or disruption of the router. Since the device is no longer supported and unpatched, affected users remain vulnerable if the device is still in use. No known exploits in the wild have been reported to date.
Mitigation Recommendations
No official fix or patch is available due to the product being end-of-life since 2009. Users are advised to discontinue use of the affected device and replace it with a supported model. Network-level mitigations such as restricting remote access to the device may reduce exposure but do not eliminate the vulnerability.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-05-29T08:19:45.701Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a199936e29bf47b50eaf3b6
Added to database: 5/29/2026, 1:48:38 PM
Last enriched: 5/29/2026, 2:18:42 PM
Last updated: 5/31/2026, 4:43:26 AM
Views: 9
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.