CVE-2026-10064 identifies a stack-based buffer overflow in the TRENDnet TEW-432BRP router firmware version 3.10B20. The vulnerability is triggered by manipulating the special_name argument in the formSetPortTr function, located in the /goform/formSetPortTr file. This flaw allows remote attackers to cause a buffer overflow condition. The vendor has declared the product end-of-life for over 15 years and will not issue patches or mitigations. No official remediation or patch is available, and the vulnerability is publicly known but not confirmed exploited in the wild.

Successful exploitation could lead to memory corruption on the affected device, potentially allowing an attacker to disrupt device operation or execute arbitrary code with limited privileges. However, the impact is somewhat limited by the medium CVSS score and the requirement for remote access to the vulnerable function. Since the device is EOL and unsupported, affected devices remain vulnerable without vendor remediation.

No official fix or patch is available due to the product's end-of-life status. Users should consider replacing the affected TRENDnet TEW-432BRP devices with supported hardware to mitigate risk. Network-level protections such as firewall rules restricting access to the device's management interface may reduce exposure. Patch status is not confirmed; check vendor advisories for any updates, though none are expected.