CVE-2026-10159: Stack-based Buffer Overflow in TRENDnet TEW-432BRP
CVE-2026-10159 is a high-severity stack-based buffer overflow vulnerability in the TRENDnet TEW-432BRP router, specifically in the formSysLog function accessed via /goform/formSysLog. The vulnerability arises from improper handling of the current_page argument, allowing remote attackers to cause a buffer overflow. The affected product version is 3.10B20. This device has been end-of-life (EOL) since 2009, and the vendor has stated they will not provide a fix or replicate the issue due to the product's age. Exploit code is publicly available, but no known exploitation in the wild has been reported. No official patch or remediation is available.
AI Analysis
Technical Summary
The TRENDnet TEW-432BRP version 3.10B20 contains a stack-based buffer overflow vulnerability in the formSysLog function, triggered by manipulation of the current_page argument in the /goform/formSysLog endpoint. This vulnerability allows remote attackers to overflow the stack, potentially leading to arbitrary code execution or denial of service. The product has been EOL since 2009, and the vendor has explicitly stated they will not provide a fix. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity. Public exploit code exists, but no active exploitation has been confirmed.
Potential Impact
Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code or cause a denial of service on affected devices. Given the device is EOL and unsupported, affected systems remain vulnerable indefinitely unless replaced. No known active exploitation has been reported, but public exploit availability increases risk.
Mitigation Recommendations
No official patch or fix is available due to the product being end-of-life for over 15 years. The vendor does not provide support or remediation for this vulnerability. The recommended mitigation is to replace the affected TRENDnet TEW-432BRP devices with supported hardware to eliminate exposure. Network-level protections such as restricting access to the device's management interface may reduce risk but do not resolve the underlying vulnerability.
CVE-2026-10159: Stack-based Buffer Overflow in TRENDnet TEW-432BRP
Description
CVE-2026-10159 is a high-severity stack-based buffer overflow vulnerability in the TRENDnet TEW-432BRP router, specifically in the formSysLog function accessed via /goform/formSysLog. The vulnerability arises from improper handling of the current_page argument, allowing remote attackers to cause a buffer overflow. The affected product version is 3.10B20. This device has been end-of-life (EOL) since 2009, and the vendor has stated they will not provide a fix or replicate the issue due to the product's age. Exploit code is publicly available, but no known exploitation in the wild has been reported. No official patch or remediation is available.
CVSS v4.0
Score 8.7high
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The TRENDnet TEW-432BRP version 3.10B20 contains a stack-based buffer overflow vulnerability in the formSysLog function, triggered by manipulation of the current_page argument in the /goform/formSysLog endpoint. This vulnerability allows remote attackers to overflow the stack, potentially leading to arbitrary code execution or denial of service. The product has been EOL since 2009, and the vendor has explicitly stated they will not provide a fix. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity. Public exploit code exists, but no active exploitation has been confirmed.
Potential Impact
Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code or cause a denial of service on affected devices. Given the device is EOL and unsupported, affected systems remain vulnerable indefinitely unless replaced. No known active exploitation has been reported, but public exploit availability increases risk.
Mitigation Recommendations
No official patch or fix is available due to the product being end-of-life for over 15 years. The vendor does not provide support or remediation for this vulnerability. The recommended mitigation is to replace the affected TRENDnet TEW-432BRP devices with supported hardware to eliminate exposure. Network-level protections such as restricting access to the device's management interface may reduce risk but do not resolve the underlying vulnerability.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-05-30T07:00:26.542Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a1b8fede29bf47b50aef09f
Added to database: 05/31/2026, 01:33:33 UTC
Last enriched: 06/07/2026, 20:56:32 UTC
Last updated: 07/31/2026, 19:22:57 UTC
Views: 116
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.