Skip to main content

TRENDnet Router EUVDEUVD-2026-62217

| CVE-2026-75985 LOW
Command Injection (CWE-77)
2026-08-19 VulDB GHSA-p66w-jxr2-r4cw
Command Injection Router
2.1
CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY
2.1 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
9.9 CRITICAL

Network-reachable command injection with low privileges; scope changes because OS commands execute beyond the web app boundary, yielding full system impact.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

4
Analysis Generated
Aug 19, 2026 - 05:28 vuln.today
Severity Changed
Aug 19, 2026 - 02:22 NVD
MEDIUM LOW
CVSS changed
Aug 19, 2026 - 02:22 NVD
5.3 (MEDIUM) 2.1 (LOW)
CVE Published
Aug 19, 2026 - 01:15 cve.org
LOW 2.1

DescriptionCVE.org

A flaw has been found in TRENDnet Router 1.1.02b01. The affected element is an unknown function of the file /cgi-bin/ping.cgi. This manipulation of the argument wan_type causes command injection. The attack may be initiated remotely. The exploit has been published and may be used.

AnalysisAI

Command injection in TRENDnet Router firmware 1.1.02b01 allows authenticated remote attackers to execute arbitrary OS commands by manipulating the wan_type parameter in the /cgi-bin/ping.cgi endpoint. A publicly available proof-of-concept exploit (hosted on GitHub) lowers the technical bar for exploitation. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Obtain low-privilege router credentials
Delivery
Send crafted HTTP request to /cgi-bin/ping.cgi
Exploit
Inject shell metacharacters in wan_type parameter
Execution
CGI passes unsanitized input to OS command
Impact
Execute arbitrary commands on router OS
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires authenticated access to the TRENDnet Router's web management interface with at minimum low-privilege credentials (PR:L per CVSS 4.0 vector). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N with VC:L/VI:L/VA:L) presents an internal tension: network-reachable, low-complexity command injection with no attack requirements or user interaction is a high-risk profile, yet all confidentiality, integrity, and availability metrics are rated Low. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker with valid low-privilege credentials to the TRENDnet Router's web interface (e.g., a guest account or default credentials) sends a crafted HTTP POST or GET request to `/cgi-bin/ping.cgi` with a shell-injected `wan_type` parameter such as `; id; cat /etc/passwd #`. The router's CGI handler passes this unsanitized value to an OS command, executing the injected payload in the context of the web server process. …
Remediation No vendor-released patch has been identified at time of analysis - the available references point only to VulDB entries and the NVD detail page, with no TRENDnet security advisory or firmware update. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Router

View all
CVE-2022-27668 CRITICAL POC
9.8 Jun 14

Depending on the configuration of the route permission table in file 'saprouttab', it is possible for an unauthenticated
CVE-2014-0984 MEDIUM POC
4.3 Apr 17

The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation

CVE-2026-13385 CRITICAL
9.5 Jul 15

Remote command execution in certain ASUS router firmware allows a network man-in-the-middle attacker to force the router
CVE-2025-15101 HIGH
8.5 Mar 26

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Web management interface of ASUS router models that allo
CVE-2026-11851 MEDIUM
5.9 Jul 15

SQL injection in the web management interface of multiple ASUS router models enables a remotely authenticated, high-priv

Same weakness CWE-77 – Command Injection

View all
CVE-2024-21887 CRITICAL POC
9.1
CVE-2012-1823 CRITICAL POC
9.8
CVE-2016-1555 CRITICAL POC
9.8
CVE-2024-55956 CRITICAL POC
9.8
CVE-2015-2051 HIGH POC
8.8
CVE-2017-6327 HIGH POC
8.8
CVE-2023-34960 CRITICAL POC
9.8
CVE-2023-37679 CRITICAL POC
9.8

Same technique Command Injection

View all
CVE-2024-21887 CRITICAL POC
9.1
CVE-2019-15107 CRITICAL POC
9.8
CVE-2024-51378 CRITICAL POC
9.8
CVE-2012-1823 CRITICAL POC
9.8
CVE-2016-1555 CRITICAL POC
9.8
CVE-2014-6271 CRITICAL POC
9.8
CVE-2024-55956 CRITICAL POC
9.8
CVE-2018-11138 CRITICAL POC
9.8

Share

EUVD-2026-62217 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy