12
CVEs
2
Critical
4
High
0
KEV
12
PoC
6
Unpatched C/H
0.0%
Patch Rate
1.1%
Avg EPSS
Severity Breakdown
CRITICAL
2
HIGH
4
MEDIUM
0
LOW
6
Monthly CVE Trend
Affected Products (30)
Tew 827Dru Firmware
42
Tew 755Ap Firmware
26
Tew 432Brp
18
Tew 821Dap
13
Tew 652Brp Firmware
10
Tew 651Br Firmware
7
Tew 820Ap Firmware
7
Tew 755Ap2Kac Firmware
6
Tew 657Brm
6
Tew 825Dap Firmware
6
Tew 632Brp Firmware
6
Tew 652Bru Firmware
6
Tew 811dru Firmware
6
Tv Ip110Wn Firmware
6
Tew 821Dap2Kac Firmware
6
Tew 831Dr Firmware
5
Tew 814Dap Firmware
5
Tew 929Dru Firmware
4
Tv Ip1314Pi Firmware
3
Dir 825 Firmware
3
Tew 752Dru Firmware
3
Tew733Gr Firmware
3
Tew 822Dre Firmware
2
PHP
2
Tew 751Dr Firmware
2
Tew Wlc100P Firmware
2
Tew 812Dru Firmware
2
Tew 812Dru
2
Tew 713Re
2
Tw100 S4W1Ca Firmware
2
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-75784 | Remote stack-based buffer overflow in the embedded nginx binary (/usr/nginx/sbin/nginx) of the TRENDnet TEW-WLC100 wireless LAN controller, firmware 1v2.07b01, lets remote attackers overflow a fixed-size stack buffer in the HTTP Server-header handling routine FUN_0040da4c. Reported through VulDB with a public proof-of-concept exploit already available, the flaw carries a CVSS 4.0 base score of 9.3 and, per its vector, requires no authentication or user interaction. There is no public exploit identified as being used in active attacks - only a POC exists - but the combination of a network-reachable overflow and released exploit code makes this a high-priority patching candidate. | CRITICAL | 9.3 | 1.0% | 68 |
PoC
No patch
|
| CVE-2026-77946 | Stack-based buffer overflow in the TRENDnet TEW-821DAP (firmware 2.2.01b05) wireless access point allows attackers reaching the /cgi-bin/apply_time.cgi NTP Timezone Configuration Handler to corrupt the stack via oversized values in the system.ntp.server, system.ntp.enable_server, cameo.time.time_zone, or cameo.cameo.syslog_server parameters, which flow unchecked into the uci_safe_get function. Publicly available exploit code exists (disclosed via VulDB and a GitHub write-up), though there is no public exploit identified as being used in active attacks. Successful exploitation can crash the device or potentially execute attacker-controlled code with the privileges of the web server process. | CRITICAL | 9.3 | 1.0% | 68 |
PoC
No patch
|
| CVE-2026-76589 | Stack-based buffer overflow in TRENDnet TEW-755AP firmware (versions up to 20260702) allows remote low-privileged attackers to corrupt the stack in the /sbin/mycli binary by supplying an oversized ssid argument to function FUN_401000, potentially enabling arbitrary code execution on the device. A public Python proof-of-concept (poc-mycli-overflow.py) is available on GitHub, materially elevating practical risk beyond the theoretical score. No vendor-released patch has been identified at time of analysis, leaving affected devices without an official remediation path. | HIGH | 8.6 | 0.6% | 64 |
PoC
No patch
|
| CVE-2026-76590 | Stack-based buffer overflow in TRENDnet TEW-755AP firmware (up to build 20260702) allows remote low-privileged attackers to corrupt stack memory via the cameo.wan.wan_pppoe_password_00 parameter in /cgi-bin/wan.cgi. A public proof-of-concept exploit script is confirmed on GitHub, materially lowering the bar for exploitation. The CVSS 4.0 score of 8.6 reflects high impact across confidentiality, integrity, and availability on both the device and downstream network systems, though no CISA KEV listing confirms active in-the-wild exploitation at time of analysis. | HIGH | 8.6 | 0.6% | 64 |
PoC
No patch
|
| CVE-2026-75783 | Stack-based buffer overflow in the DHCP blobmsg handler within /sbin/netifd on TRENDnet TEW-WLC100P firmware 12.07b01 allows unauthenticated adjacent-network attackers to execute arbitrary code with no user interaction required. A working proof-of-concept Python exploit script has been publicly released on GitHub, materially lowering the skill threshold for exploitation. No CISA KEV listing exists at time of analysis and no vendor patch has been identified, leaving affected devices exposed with only network-level compensating controls available. | HIGH | 8.6 | 0.4% | 63 |
PoC
No patch
|
| CVE-2026-76584 | Stack-based buffer overflow in TRENDnet TV-IP751WIC firmware 11.03.03 allows remote low-privileged attackers to achieve arbitrary code execution by sending a crafted value in the Currenttime parameter to the /cgi-bin/admin/set_time.cgi endpoint handled by the alphapd daemon. The CVSS 4.0 score of 8.6 reflects high impact across confidentiality, integrity, and availability for both the compromised device and subsequent systems in its network segment. A public proof-of-concept exploit script is confirmed available on GitHub, though this vulnerability is not currently listed in the CISA KEV catalog. | HIGH | 8.6 | 0.5% | 63 |
PoC
No patch
|
| CVE-2026-77988 | Command injection in TRENDnet TEW-823DRU firmware 1.1.02b01 allows a remote, authenticated attacker to inject arbitrary OS commands through the nvram_get function in the CLI Configuration Tool. Exploitation requires high-privilege credentials (PR:H per CVSS 4.0), limiting the attacker pool to those who have obtained administrative access. A public proof-of-concept is documented on GitHub; no CISA KEV listing has been recorded at time of analysis, and no vendor-released patch has been identified. | LOW | 2.0 | 2.4% | 32 |
PoC
No patch
|
| CVE-2026-77945 | Command injection in TRENDnet TEW-821DAP 2.2.01b05 allows remote low-privileged attackers to execute arbitrary OS commands via the `filename` argument in the `/cgi-bin/upload.cgi` CGI endpoint's SSI component. A public proof-of-concept exploit is available on GitHub, raising the operational risk above what the vendor-supplied CVSS 4.0 score of 2.1 suggests. No active exploitation has been confirmed via CISA KEV, but the combination of network accessibility, low complexity, and public PoC makes this a credible threat to any deployed unit. | LOW | 2.1 | 1.8% | 32 |
PoC
No patch
|
| CVE-2026-75984 | Command injection in TRENDnet TEW-823DRU firmware version 1.1.02b01 allows a network-accessible, low-privileged authenticated attacker to execute arbitrary OS commands by manipulating the Hostname parameter in the /cgi-bin/admin.cgi endpoint. The flaw is classified as CWE-77 and carries a CVSS 4.0 base score of 2.1 with the E:P threat modifier applied, reflecting a publicly available proof-of-concept exploit on GitHub. No vendor-released patch has been identified at time of analysis, and the vulnerability is not currently listed in the CISA KEV catalog. | LOW | 2.1 | 1.3% | 32 |
PoC
No patch
|
| CVE-2026-75985 | Command injection in TRENDnet Router firmware 1.1.02b01 allows authenticated remote attackers to execute arbitrary OS commands by manipulating the `wan_type` parameter in the `/cgi-bin/ping.cgi` endpoint. A publicly available proof-of-concept exploit (hosted on GitHub) lowers the technical bar for exploitation. The provided CVSS 4.0 score of 2.1 with low impact metrics is notably inconsistent with typical command injection severity and warrants independent verification against actual privilege boundaries of the CGI process. | LOW | 2.1 | 1.3% | 32 |
PoC
No patch
|
| CVE-2026-76582 | Command injection in TRENDnet TEW-821DAP firmware 2.2.01b05 allows authenticated remote attackers to execute arbitrary OS commands by supplying shell metacharacters in the `ipaddr` parameter of the `/cgi-bin/ping.cgi` endpoint. The SSI component passes this input unsanitized to `popen`/`system`, enabling full OS command execution on the device. A public proof-of-concept exploit is available on GitHub, lowering the bar for exploitation against devices reachable over the network. | LOW | 2.1 | 1.3% | 32 |
PoC
No patch
|
| CVE-2026-76583 | Command injection in TRENDnet TV-IP751WIC firmware 11.03.03 enables remote authenticated attackers to execute arbitrary OS commands through the /cgi-bin/admin/set_time.cgi endpoint handled by the alphapd daemon. The flaw stems from unsanitized user input passed directly to a shell command in the time-setting CGI handler. A public proof-of-concept exploit (poc-time-injection.py) is confirmed available on GitHub, lowering the barrier to exploitation significantly; no CISA KEV listing has been issued at time of analysis. | LOW | 2.1 | 1.1% | 32 |
PoC
No patch
|