Which versions of TRENDnet TEW-432BRP are affected by EUVD-2026-33465?

TRENDnet TEW-432BRP routers running firmware 3.10B20 and earlier contain a stack-based buffer overflow (CVE-2026-10123, CVSS 7.4) exploitable by authenticated attackers.

Is there a public PoC exploit available for EUVD-2026-33465?

Yes, a public proof-of-concept exploit is available for EUVD-2026-33465. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate EUVD-2026-33465?

Within 24 hours: Conduct network inventory audit to identify all TRENDnet TEW-432BRP devices in production, regardless of firmware version. Within 7 days: Develop replacement schedule prioritizing internet-facing units and establish procurement for replacement routers from active vendors. Within 30 days: Complete decommissioning and replacement of all TEW-432BRP routers with current-generation models receiving vendor security updates.

TRENDnet TEW-432BRP EUVD-2026-33465

Q: What is the CVSS score of EUVD-2026-33465?

EUVD-2026-33465 has a CVSS 4.0 base score of 7.4 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-10123 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-05-30 VulDB

GHSA-jf2g-jq29-jvjp

Buffer Overflow Stack Overflow Tew 432Brp

7.4

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

7.4 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Updated

May 30, 2026 - 16:29 vuln.today

v3 (cvss_changed)

Analysis Updated

May 30, 2026 - 16:29 vuln.today

v2 (cvss_changed)

Re-analysis Queued

May 30, 2026 - 16:22 vuln.today

cvss_changed

CVSS changed

May 30, 2026 - 16:22 NVD

8.8 (HIGH) 7.4 (HIGH)

Analysis Generated

May 30, 2026 - 16:20 vuln.today

DescriptionCVE.org

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. This impacts the function formSetDomainFilter of the file /goform/formSetDomainFilter. Performing a manipulation of the argument blocked_domain/permitted_domain/blocked_domain_list/permitted_domain_list results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.

AnalysisAI

Stack-based buffer overflow in TRENDnet TEW-432BRP 3.10B20 router firmware allows authenticated remote attackers to corrupt memory via the formSetDomainFilter handler at /goform/formSetDomainFilter by manipulating the blocked_domain, permitted_domain, blocked_domain_list, or permitted_domain_list parameters. Publicly available exploit code exists, and the vendor has stated the device has been end-of-life since 2009 and will not receive a fix, leaving any internet-exposed unit permanently vulnerable. No CISA KEV listing or EPSS data was provided, but the combination of public PoC and abandoned hardware materially elevates real-world risk.

Technical ContextAI

The TEW-432BRP is a legacy SOHO wireless router whose web administration interface uses Boa-style /goform/* CGI handlers compiled into the firmware. CWE-121 (stack-based buffer overflow) here indicates the formSetDomainFilter handler copies attacker-supplied domain-filter strings into a fixed-size stack buffer without bounds checking, allowing the saved return address or adjacent stack data to be overwritten. On embedded MIPS/ARM SOHO devices of this era, such overflows commonly yield arbitrary code execution because protections like stack canaries, ASLR, and non-executable stacks are typically absent or weakly implemented. The single CPE cpe:2.3:a:trendnet:tew-432brp:*:*:*:*:*:*:*:* covers all firmware revisions of the device, consistent with the vendor's statement that the entire product line is unsupported.

RemediationAI

No vendor-released patch identified at time of analysis - TRENDnet has formally declined to fix this vulnerability because the product reached end-of-life in 2009. The only durable remediation is to decommission and replace the TEW-432BRP with a currently supported router. Until replacement, restrict access to the web administration interface to trusted LAN hosts only and ensure the WAN-side management interface is disabled (this is the default but should be verified), change any default or weak administrator credentials to a strong unique password since exploitation requires PR:L authentication, and place the device behind a separate firewall or network segment if it must remain in service. Avoid exposing /goform/formSetDomainFilter or any admin URL to untrusted networks; the trade-off of disabling remote management is loss of off-LAN administration, which is acceptable for a legacy device. Monitor the VulDB entry at https://vuldb.com/vuln/367300 for any third-party mitigations.