Is there a public PoC exploit available for CVE-2026-5184?

Yes, a public proof-of-concept exploit is available for CVE-2026-5184. Prioritise patching immediately. EPSS: 0.8%.

Tew 713Re CVE-2026-5184

Q: What is the CVSS score of CVE-2026-5184?

CVE-2026-5184 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.8%.

EUVD-2026-17335 LOW

Command Injection (CWE-77)

2026-03-31 VulDB

Command Injection Tew 713Re Trendnet

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

5.3 (MEDIUM) 2.1 (LOW)

PoC Detected

Apr 01, 2026 - 14:24 vuln.today

Public exploit code

EUVD ID Assigned

Mar 31, 2026 - 07:00 euvd

EUVD-2026-17335

Analysis Generated

Mar 31, 2026 - 07:00 vuln.today

CVE Published

Mar 31, 2026 - 06:45 nvd

MEDIUM 5.3

DescriptionCVE.org

A vulnerability was identified in TRENDnet TEW-713RE up to 1.02. The impacted element is an unknown function of the file /goform/setSysAdm. The manipulation of the argument admuser leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Remote command injection in TRENDnet TEW-713RE firmware up to version 1.02 allows authenticated remote attackers to execute arbitrary commands via the admuser parameter in the /goform/setSysAdm endpoint. Publicly available exploit code exists, and the vendor has not responded to early disclosure attempts, leaving all affected devices without a vendor-released patch.

Technical ContextAI

The vulnerability exists in the web administration interface of the TRENDnet TEW-713RE router. The /goform/setSysAdm endpoint processes user-supplied input from the admuser parameter without proper input validation or sanitization, leading to command injection (CWE-77). The vulnerable code path accepts the admuser argument and passes it directly to a system command execution function, allowing an authenticated attacker to break out of the intended command context and inject arbitrary shell metacharacters and commands. This is a classic OS command injection flaw where user input is concatenated into a system call without escaping or parameterization.

RemediationAI

No vendor-released patch has been identified at time of analysis. TRENDnet was contacted early but has not responded or published a fix. For immediate risk mitigation, restrict network access to the router's web administration interface using firewall rules, ensure only trusted administrator accounts have access, enforce strong administrative passwords, and consider disabling remote administration features if not required. Monitor for suspicious activity on the /goform/setSysAdm endpoint. Organizations should contact TRENDnet support to inquire about firmware updates or consider replacing the device if administrative access cannot be adequately restricted.