Threats tagged 'ghsa-r63q-p323-qrrf'

A critical security vulnerability (CVE-2026-129351) exists in TRENDnet TEW-657BRM version 1.00.1. The flaw is an out-of-bounds write caused by improper handling in the sprintf function within the /setup.cgi file of the mini_httpd component. This vulnerability can be exploited remotely without authentication. The product is end-of-life and no longer supported by the vendor, who has not confirmed the vulnerability's existence but plans to notify customers. The vulnerability has a maximum CVSS score of 10.0, indicating severe impact on confidentiality, integrity, and availability.