Which versions of TRENDnet TEW-755AP are affected by EUVD-2026-63101?

TRENDnet TEW-755AP wireless routers (firmware version 20260702 and earlier) contain a critical vulnerability allowing remote attackers to gain complete control of network infrastructure devices, with…

Is there a public PoC exploit available for EUVD-2026-63101?

Yes, a public proof-of-concept exploit is available for EUVD-2026-63101. Prioritise patching immediately. EPSS: 0.6%.

How to fix or mitigate EUVD-2026-63101?

Within 24 hours, identify all TEW-755AP devices in production and document their current firmware versions; isolate any device running version 20260702 or earlier from untrusted network segments and enable monitoring for SSID-based exploitation attempts. Within 7 days, confirm patch availability directly with TRENDnet support and begin evaluation of alternative routing platforms as contingency; if no patch timeline is provided, initiate procurement for replacement devices. By day 30, complete migration to patched devices or approved alternatives, implement network segmentation to isolate any remaining vulnerable TEW-755AP routers on dedicated VLANs, and deploy intrusion detection signatures targeting poc-mycli-overflow.py exploitation patterns.

TRENDnet TEW-755AP EUVD-2026-63101

Q: What is the CVSS score of EUVD-2026-63101?

EUVD-2026-63101 has a CVSS 4.0 base score of 8.6 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.6%.

| CVE-2026-76589 HIGH

Stack-based Buffer Overflow (CWE-121)

2026-08-19 VulDB

GHSA-qjr2-7w3m-c4fr

Stack Overflow Buffer Overflow Tew 755Ap

8.6

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

8.6 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

9.9 CRITICAL

Network-reachable CLI with no interaction needed but PR:L required; scope changes because device compromise impacts all traffic on the bridged network.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Updated

Aug 19, 2026 - 22:28 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Aug 19, 2026 - 22:22 vuln.today

cvss_changed

Severity Changed

Aug 19, 2026 - 22:22 NVD

CRITICAL HIGH

CVSS changed

Aug 19, 2026 - 22:22 NVD

9.4 (CRITICAL) 8.6 (HIGH)

Analysis Generated

Aug 19, 2026 - 22:16 vuln.today

CVE Published

Aug 19, 2026 - 21:30 cve.org

CRITICAL 9.4

DescriptionCVE.org

A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN_401000 of the file /sbin/mycli. The manipulation of the argument ssid results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used.

AnalysisAI

Stack-based buffer overflow in TRENDnet TEW-755AP firmware (versions up to 20260702) allows remote low-privileged attackers to corrupt the stack in the /sbin/mycli binary by supplying an oversized ssid argument to function FUN_401000, potentially enabling arbitrary code execution on the device. A public Python proof-of-concept (poc-mycli-overflow.py) is available on GitHub, materially elevating practical risk beyond the theoretical score. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Exploitation requires network-level reachability to the TEW-755AP management interface and at least low-privilege authentication (confirmed by PR:L in the CVSS 4.0 vector). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 4.0 score of 8.6 with vector AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H reflects network-accessible, low-complexity exploitation requiring only low-privilege authentication, with complete impact across both the vulnerable device and subsequent systems it bridges. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	No vendor-released patch has been identified at time of analysis; monitor TRENDnet's security advisories and VulDB (https://vuldb.com/vuln/393085) for patch availability and apply any released firmware update immediately. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, identify all TEW-755AP devices in production and document their current firmware versions; isolate any device running version 20260702 or earlier from untrusted network segments and enable monitoring for SSID-based exploitation attempts. …

Threat intelligence, references, and detailed analysis are available after sign-in.