Which versions of TRENDnet TEW-432BRP are affected by CVE-2026-10119?

The TRENDnet TEW-432BRP router firmware (version 3.10B20) contains a stack-based buffer overflow allowing remote attackers to execute arbitrary code on the device, with publicly available exploit…

Is there a public PoC exploit available for CVE-2026-10119?

Yes, a public proof-of-concept exploit is available for CVE-2026-10119. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-10119?

Within 24 hours: Identify and isolate any TEW-432BRP units currently deployed; apply restrictive firewall rules to limit network access. Within 7 days: Develop replacement plan for all affected devices with current-generation supported alternatives. Within 30 days: Complete migration and removal of all TEW-432BRP routers from production environments.

TRENDnet TEW-432BRP CVE-2026-10119

Q: What is the CVSS score of CVE-2026-10119?

CVE-2026-10119 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-33461 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-05-30 VulDB

GHSA-6h97-47q2-q3f7

Buffer Overflow Stack Overflow Tew 432Brp

7.4

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Updated

May 30, 2026 - 14:28 vuln.today

v3 (cvss_changed)

Analysis Updated

May 30, 2026 - 14:27 vuln.today

v2 (cvss_changed)

Re-analysis Queued

May 30, 2026 - 14:22 vuln.today

cvss_changed

CVSS changed

May 30, 2026 - 14:22 NVD

8.8 (HIGH) 7.4 (HIGH)

Analysis Generated

May 30, 2026 - 13:59 vuln.today

DescriptionCVE.org

A security vulnerability has been detected in TRENDnet TEW-432BRP 3.10B20. Impacted is the function formSetMACFilter of the file /goform/formSetMACFilter. The manipulation of the argument filter_name leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.

AnalysisAI

Stack-based buffer overflow in TRENDnet TEW-432BRP 3.10B20 router firmware allows authenticated remote attackers to corrupt memory via the filter_name parameter of the formSetMACFilter handler at /goform/formSetMACFilter, potentially leading to arbitrary code execution or device compromise. Publicly available exploit code exists (published via GitHub), and the vendor has explicitly stated they will not patch because the device reached end-of-life in 2009. Despite a CVSS 4.0 score of 7.4, no CISA KEV listing or EPSS data is provided in the source intelligence.

Technical ContextAI

The TEW-432BRP is a legacy TRENDnet 802.11g wireless broadband router whose web management interface relies on /goform/ CGI-style endpoints typical of embedded BOA/GoAhead-derived web servers found in older SOHO routers. The vulnerability is classified as CWE-121 (Stack-based Buffer Overflow): the formSetMACFilter handler copies the user-controlled filter_name argument into a fixed-size stack buffer without bounds checking, allowing the saved return address and adjacent stack frame data to be overwritten. On MIPS/ARM-based SOHO routers of this era, such overflows commonly lack stack canaries, ASLR, and NX, making reliable control-flow hijacking feasible.

RemediationAI

No vendor-released patch identified at time of analysis, and the vendor has explicitly stated none will be produced because the TEW-432BRP has been EOL since 2009. The only durable remediation is device replacement with a currently supported router; this is the recommended action. Until replacement, restrict the router's web management interface to the LAN only (disable WAN-side / remote management), change default administrative credentials to a long unique password to limit the PR:L exploitation prerequisite, place the device on an isolated network segment with no access to sensitive resources, and consider blocking outbound traffic from the device to detect post-exploitation callbacks - the trade-off is loss of remote administration convenience and added network complexity. References for tracking: https://vuldb.com/vuln/367296 and the public PoC at https://github.com/wudipjq/my_vuln/blob/main/TRENDnet/vuln_6/6.md (treat as adversary capability, not a fix).