Which versions of TRENDnet TV-IP751WIC are affected by EUVD-2026-63094?

The TRENDnet TV-IP751WIC network camera running firmware 11.03.03 contains a remotely exploitable buffer overflow vulnerability (CVSS 8.6) enabling arbitrary code execution and complete device…

Is there a public PoC exploit available for EUVD-2026-63094?

Yes, a public proof-of-concept exploit is available for EUVD-2026-63094. Prioritise patching immediately. EPSS: 0.5%.

How to fix or mitigate EUVD-2026-63094?

Within 24 hours, inventory all TRENDnet TV-IP751WIC cameras and identify any running firmware 11.03.03; immediately isolate affected devices to a segregated VLAN with restricted network access to contain potential compromise. Within 7 days, contact TRENDnet support to confirm patch availability status and request guidance on firmware updates or workarounds; prepare a non-production test environment to validate any released patches before deployment. Within 30 days, deploy the latest available firmware from TRENDnet to all affected devices, implement firewall rules to restrict access to camera management interfaces, disable remote administrative access where operationally feasible, and establish monitoring to detect unauthorized access attempts or anomalous outbound traffic from affected cameras.

TRENDnet TV-IP751WIC EUVD-2026-63094

Q: What is the CVSS score of EUVD-2026-63094?

EUVD-2026-63094 has a CVSS 4.0 base score of 8.6 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.5%.

| CVE-2026-76584 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-08-19 VulDB

GHSA-g7xg-mvgf-qr55

Stack Overflow Buffer Overflow Tv Ip751Wic

8.6

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

8.6 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

9.9 CRITICAL

Network-accessible CGI endpoint requires only low-privilege credentials; full device compromise with network-pivot potential warrants S:C and H across all CIA metrics.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Aug 19, 2026 - 21:41 vuln.today

Severity Changed

Aug 19, 2026 - 21:22 NVD

CRITICAL HIGH

CVSS changed

Aug 19, 2026 - 21:22 NVD

9.4 (CRITICAL) 8.6 (HIGH)

CVE Published

Aug 19, 2026 - 21:00 cve.org

HIGH 8.6

DescriptionCVE.org

A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/set_time.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

AnalysisAI

Stack-based buffer overflow in TRENDnet TV-IP751WIC firmware 11.03.03 allows remote low-privileged attackers to achieve arbitrary code execution by sending a crafted value in the Currenttime parameter to the /cgi-bin/admin/set_time.cgi endpoint handled by the alphapd daemon. The CVSS 4.0 score of 8.6 reflects high impact across confidentiality, integrity, and availability for both the compromised device and subsequent systems in its network segment. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Exploitation requires network reachability to the camera's web management interface and valid low-privilege credentials (confirmed by PR:L in the CVSS 4.0 vector). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N) places exploitation within reach of any attacker who obtains low-privilege credentials - no special conditions, no user interaction, no complex attack preparation. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	No vendor-released patch has been identified at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, inventory all TRENDnet TV-IP751WIC cameras and identify any running firmware 11.03.03; immediately isolate affected devices to a segregated VLAN with restricted network access to contain potential compromise. …

Threat intelligence, references, and detailed analysis are available after sign-in.