The vulnerability CVE-2026-75784 affects TRENDnet TEW-WLC100 version 1v2.07b01. It is a stack-based buffer overflow in the function FUN_0040da4c of the /usr/nginx/sbin/nginx binary, part of the HTTP Header Handler. The issue arises from improper handling of the Server argument, allowing an attacker to remotely trigger a buffer overflow condition. The vulnerability has a CVSS 4.0 base score of 10.0, indicating critical severity. Exploit code is publicly available, but there are no known reports of exploitation in the wild. No patch or remediation information is provided in the available data.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service on the affected TRENDnet TEW-WLC100 device. Given the critical CVSS score and the availability of public exploit code, the risk to unpatched devices is high. The vulnerability requires no privileges, no user interaction, and can be triggered remotely, making it highly exploitable.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected device's management interface to trusted sources only. Monitor for unusual activity related to HTTP header manipulation. Avoid exposing the device directly to untrusted networks.