Threat database

CVE-2026-109157 is a critical stack-based buffer overflow vulnerability in the TRENDnet TEW-432BRP router, specifically in the formTcpipSetup function. The vulnerability is triggered by manipulating the 'Name' argument in the /goform/formTcpipSetup endpoint. This flaw allows remote attackers to potentially execute arbitrary code. The affected version is 3.10B20. The product reached end-of-life in 2011, and no official patch or fix is available from the vendor.

CVE-2026-108804 is a critical OS command injection vulnerability in the Web Management Backend of TRENDnet TEW-751DR, TEW-752DRU, and TEW733GR routers version 1.03B01 and 1.03B03. The flaw exists in the fwrite function of pigwidgeon.cgi, allowing remote attackers to inject operating system commands via the 'service' argument. The vulnerability affects routers that reached end-of-life in 2011, and the vendor does not provide patches or support for these models. Exploit code is publicly available, but no active exploitation in the wild is confirmed.

CVE-2026-77988 is a command injection vulnerability in the nvram_get function of the CLI Configuration Tool component in TRENDnet TEW-823DRU version 1.1.02b01. This vulnerability allows remote attackers with high privileges to execute arbitrary commands. The vulnerability has a medium severity score of 5.1 and public exploit code is available. No patch or remediation information is provided.

CVE-2026-77946 is a critical stack-based buffer overflow vulnerability in the TRENDnet TEW-821DAP device version 2.2.01b05. It affects the uci_safe_get function in the /cgi-bin/apply_time.cgi file, specifically within the NTP Timezone Configuration Handler component. The vulnerability arises from improper handling of certain arguments related to NTP server and timezone settings, allowing remote attackers to trigger a buffer overflow. The exploit has been publicly disclosed, and the vulnerability has a maximum CVSS score of 10. No patch or remediation information is provided.

CVE-2026-77945 is a command injection vulnerability in the TRENDnet TEW-821DAP router version 2.2.01b05. It occurs in the /cgi-bin/upload.cgi file within the ssi component, where manipulation of the filename argument can lead to remote command execution. The vulnerability has a medium severity score of 5.3 and an exploit has been publicly disclosed, though no known active exploitation in the wild is reported.

CVE-2026-76591 is a command injection vulnerability in the TRENDnet TEW-755AP device affecting the log_email_server function in /cgi-bin/email.cgi. This flaw allows remote attackers to execute arbitrary commands by manipulating input to the vulnerable function. The vulnerability affects versions up to 20260702. An exploit has been publicly released. The CVSS 4.0 score is 5.3, indicating medium severity.

CVE-2026-76590 is a critical stack-based buffer overflow vulnerability in the TRENDnet TEW-755AP device affecting the /cgi-bin/wan.cgi component. The flaw arises from improper handling of the cameo.wan.wan_pppoe_password_00 argument, allowing remote attackers to execute a buffer overflow. Exploit code is publicly available, increasing the risk of exploitation. No specific affected versions or patch information is provided.

CVE-2026-76589 is a critical stack-based buffer overflow vulnerability in the TRENDnet TEW-755AP device, specifically in the function FUN_401000 within /sbin/mycli. The vulnerability arises from improper handling of the ssid argument, allowing remote attackers to trigger the overflow. Exploit code has been publicly disclosed, increasing the risk of exploitation. No patch or remediation information is currently provided.

CVE-2026-76584 is a critical stack-based buffer overflow vulnerability in the TRENDnet TV-IP751WIC device version 11.03.03. The flaw exists in the /cgi-bin/admin/set_time.cgi component, specifically in the alphapd module, where improper handling of the Currenttime argument allows remote attackers to overflow the stack. Exploit code has been publicly released, increasing the risk of attacks.

CVE-2026-76583 is a command injection vulnerability in the TRENDnet TV-IP751WIC device, specifically affecting version 11.03.03. The flaw exists in the /cgi-bin/admin/set_time.cgi file within the alphapd component. This vulnerability allows remote attackers to execute arbitrary commands on the device. Public exploit code is available, but there are no known reports of active exploitation in the wild. The vulnerability has a medium severity rating with a CVSS score of 5.3.

CVE-2026-76582 is a command injection vulnerability in the TRENDnet TEW-821DAP router version 2.2.01b05. The flaw exists in the /cgi-bin/ping.cgi script's handling of the ipaddr parameter, allowing remote attackers to execute arbitrary commands via manipulation of this argument. The vulnerability has a medium severity score of 5.3 and has been publicly disclosed. No official patch or remediation information is provided in the available data.

CVE-2026-75985 is a command injection vulnerability in TRENDnet Router version 1.1.02b01. The flaw exists in an unknown function within the /cgi-bin/ping.cgi file, where manipulation of the wan_type argument allows remote attackers to execute arbitrary commands. The vulnerability has a medium severity rating with a CVSS score of 5.3. Exploit code has been published, but there are no reports of active exploitation in the wild. No official patch or remediation information is provided.

CVE-2026-75984 is a command injection vulnerability in the TRENDnet TEW-823DRU router, specifically affecting version 1.1.02b01. The flaw exists in the /cgi-bin/admin.cgi file where manipulation of the Hostname argument allows remote attackers to execute arbitrary commands. The vulnerability has a medium severity with a CVSS 4.0 score of 5.3. Exploit code is publicly available, but there are no known exploits in the wild at this time. No patch or remediation information is provided.

CVE-2026-75976 is a critical stack-based buffer overflow vulnerability in the TRENDnet TEW-823DRU router version 1.1.02b01. The flaw exists in the strcpy function within the /cgi-bin/wan.cgi component related to NVRAM handling. This vulnerability can be exploited remotely without user interaction and allows an attacker to manipulate the wan_l2tp_password argument to trigger the overflow. Public exploit code is available, increasing the risk of attack. The vulnerability has a high CVSS 4.0 score of 9.4, indicating severe impact on confidentiality, integrity, and availability. No official patch or remediation information is provided in the data.

CVE-2026-75877 is a critical stack-based buffer overflow vulnerability in TRENDnet TV-IP751WIC version 11.03.03. The flaw exists in several functions of the alphapd component and can be exploited remotely without user interaction. Exploit code has been published, increasing the risk of potential attacks.

CVE-2026-75784 is a critical stack-based buffer overflow vulnerability in the TRENDnet TEW-WLC100 device, specifically in version 1v2.07b01. The flaw exists in the HTTP Header Handler component within the nginx binary, where manipulation of the Server argument can trigger the overflow. This vulnerability can be exploited remotely without authentication. Public exploit code is available, increasing the risk of exploitation.

CVE-2026-75783 is a critical stack-based buffer overflow vulnerability in the DHCP blobmsg Handler component of the /sbin/netifd file on TRENDnet TEW-WLC100P version 12.07b01. Exploitation requires local network access. The vulnerability has a high CVSS 4.0 score of 9.4 and public exploit details have been disclosed.