CVE-2026-77945

🗓️ 22 Aug 2026 10:45:09Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 33 Views🌐 WEB

Command injection in TRENDnet TEW-821DAP 2.2.01b05 via filename argument in upload.cgi.

Reporter	Title	Published	Views	Family All 6
Circl	CVE-2026-77945	22 Aug 202612:12	–	circl
Cvelist	CVE-2026-77945 TRENDnet TEW-821DAP ssi upload.cgi command injection	22 Aug 202610:45	–	cvelist
EUVD	EUVD-2026-64245	22 Aug 202610:45	–	euvd
NVD	CVE-2026-77945	22 Aug 202611:16	–	nvd
Positive Technologies	PT-2026-79528	22 Aug 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-77945 TRENDnet TEW-821DAP ssi upload.cgi command injection	22 Aug 202610:45	–	vulnrichment

Vulners

Node

trendnet tew-821dapMatch2.2.01b05

[
  {
    "vendor": "TRENDnet",
    "product": "TEW-821DAP",
    "versions": [
      {
        "version": "2.2.01b05",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:o:trendnet:tew-821dap_firmware:*:*:*:*:*:*:*:*"
    ],
    "modules": [
      "ssi"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/vuln/394174/cti
vuldb	www.vuldb.com/submit/881248
vuldb	www.vuldb.com/cve/CVE-2026-77945
vuldb	www.vuldb.com/vuln/394174
github	www.github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/TEW-821DAP_ssi_Arbitrary_File_Command_Injection.md

Parameter	Position	Path	Description	CWE
filename	request body	cgi-bin/upload.cgi	Command injection via manipulation of filename parameter in /cgi-bin/upload.cgi (remote exploit public)	CWE-74, CWE-77

25 Aug 2026 13:19Current

7.3High risk

Vulners AI Score7.3

CVSS 45.3

CVSS 26.5

CVSS 3.17.4

CVSS 37.4

EPSS0.01284

SSVC