Threats tagged 'ghsa-3m9c-j5h2-5ch4'

CVE-2026-7608 is a command injection vulnerability in the tools_diagnostic function of TRENDnet TEW-821DAP firmware versions up to 1.12B01. This vulnerability allows an attacker with local privileges to execute arbitrary OS commands. The affected product is hardware version v1.xR, which has been end-of-life for 8 years and is no longer supported or sold by the vendor. Exploit code is publicly available. The CVSS score is 5.5 (medium severity).