EUVD-2026-63136
GHSA-9vvw-px6q-c765
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible CGI endpoint; PR:L per CVSS data; command injection on embedded devices typically yields full root OS control, warranting C:H/I:H/A:H.
Primary rating from Vendor (vuldb).
CVSS VectorVendor: vuldb
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
2DescriptionCVE.org
A security flaw has been discovered in TRENDnet TEW-755AP up to 20260702. This affects the function log_email_server of the file /cgi-bin/email.cgi of the component ssi. Performing a manipulation results in command injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
AnalysisAI
Command injection in TRENDnet TEW-755AP wireless access points (firmware through 20260702) allows a network-authenticated attacker to execute arbitrary OS commands by submitting crafted input to the email server configuration endpoint. The vulnerability resides in the log_email_server function within /cgi-bin/email.cgi of the SSI component, where user-supplied parameters are passed unsanitized to a system call. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must possess valid credentials granting at least low-level access to the TEW-755AP web management interface - confirmed by the CVSS 4.0 PR:L metric. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS 4.0 vector scores this at 2.1 with all vulnerable-system impacts rated Low (VC:L/VI:L/VA:L), which significantly understates the typical impact of successful command injection on an embedded networking device. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with low-privilege credentials to the TEW-755AP web interface (e.g., obtained via default credentials or credential stuffing) sends an HTTP POST request to `/cgi-bin/email.cgi` with shell metacharacters injected into the email server parameter - for example, appending `; id > /tmp/pwned` or a reverse-shell payload. The `log_email_server` function passes this value unsanitized into a system call, executing the injected commands under the CGI process's OS user context (typically root on embedded devices). … |
| Remediation | No vendor-released patch has been identified at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today