Which versions of TRENDnet TEW-432BRP are affected by CVE-2026-10120?

The TRENDnet TEW-432BRP wireless router, discontinued in 2009, contains a remote code execution vulnerability for which no vendor patch exists; publicly available exploit code exists for this…

Is there a public PoC exploit available for CVE-2026-10120?

Yes, a public proof-of-concept exploit is available for CVE-2026-10120. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-10120?

Within 24 hours: Execute a complete asset inventory to identify all TRENDnet TEW-432BRP devices on the network, including remote and legacy installations. Within 7 days: Isolate identified devices from the production network or disconnect them entirely; begin procurement of vendor-supported replacement hardware. Within 30 days: Retire all TEW-432BRP units and deploy replacement wireless routers with active vendor support, current firmware, and security patching.

TRENDnet TEW-432BRP CVE-2026-10120

Q: What is the CVSS score of CVE-2026-10120?

CVE-2026-10120 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-33462 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-05-30 VulDB

GHSA-mm7q-pjr7-mv58

Buffer Overflow Stack Overflow Tew 432Brp

7.4

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Updated

May 30, 2026 - 15:28 vuln.today

v3 (cvss_changed)

Analysis Updated

May 30, 2026 - 15:28 vuln.today

v2 (cvss_changed)

Re-analysis Queued

May 30, 2026 - 15:22 vuln.today

cvss_changed

CVSS changed

May 30, 2026 - 15:22 NVD

8.8 (HIGH) 7.4 (HIGH)

Analysis Generated

May 30, 2026 - 15:14 vuln.today

DescriptionCVE.org

A vulnerability was detected in TRENDnet TEW-432BRP 3.10B20. The affected element is the function formSetFirewallRule of the file /goform/formSetFirewallRule. The manipulation of the argument firewall_name results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.

AnalysisAI

Stack-based buffer overflow in the TRENDnet TEW-432BRP wireless router (firmware 3.10B20) allows remote authenticated attackers to corrupt memory by manipulating the firewall_name parameter sent to /goform/formSetFirewallRule, potentially leading to arbitrary code execution on the device. Publicly available exploit code exists for this issue, and because the product has been end-of-life since 2009 the vendor has explicitly refused to release a fix, leaving any still-deployed devices permanently vulnerable.

Technical ContextAI

The vulnerability is a CWE-121 stack-based buffer overflow in the formSetFirewallRule handler of the device's web administration interface (goform/* endpoints are typical of GoAhead-style embedded HTTP servers used in SOHO routers). The firewall_name argument is copied into a fixed-size stack buffer without bounds checking, allowing an oversized value to overwrite saved registers and the return address. The affected component is cpe:2.3:a:trendnet:tew-432brp:*:*:*:*:*:*:*:* - a legacy 802.11g broadband router whose firmware lacks modern mitigations such as stack canaries or ASLR typically found in current embedded Linux builds, making overflow-to-code-execution highly tractable.

RemediationAI

No vendor-released patch identified at time of analysis - TRENDnet has publicly declined to fix this device due to its 2009 EOL status, so the only durable remediation is to decommission the TEW-432BRP and replace it with a currently-supported router. Until replacement, mitigate by disabling remote (WAN-side) administration so the /goform/formSetFirewallRule endpoint is unreachable from the internet, segmenting the device behind an upstream firewall that blocks inbound HTTP/HTTPS to its management interface, restricting LAN-side admin access to a dedicated management VLAN or single trusted host, and changing the default admin credentials to a strong unique password to raise the bar against the PR:L requirement. Note the trade-off: disabling remote admin removes a convenience feature, and restricting LAN access may break any home-automation or ISP-tooling that talked to the router. Track exploit details via the VulDB advisory (https://vuldb.com/vuln/367297) and the public PoC (https://github.com/wudipjq/my_vuln/blob/main/TRENDnet/vuln_7/7.md) to recognize exploitation attempts in logs.