CVE-2026-15483: Buffer Copy without Checking Size of Input

A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function sub41EC14 of the file /goform/toolsnslookup of the component ssi. The manipulation of the argument nslookuptarget leads to buffer overflow. It is possible to initiate the attack remotely. The vendo...

PT-2026-57525

Name of the Vulnerable Software and Affected Versions Trendnet TEW-635BRM versions prior to 1.00.04 Description A flaw in the IPoA WAN Connection Setup component allows remote command injection. The issue exists within the ipoa test function located in the /sbin/rc file. An attacker can trigger...

PT-2026-57528

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-821DAP version 1.12B01 Description A buffer overflow can be triggered remotely within the ssi component. The issue resides in the sub 41EC14 function located in the /goform/tools nslookup file. A buffer overflow occurs when a...

PT-2026-57485

Name of the Vulnerable Software and Affected Versions Trendnet TEW-635BRM versions 1.0.0 through 1.0.03 Description A stack-based buffer overflow exists in the Web Service component. This occurs when the start httpd function in the /sbin/rc file improperly handles the device name argument, allowi...

CVE-2026-10060

A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. This impacts the function formSetRoute of the file /goform/formSetRoute. The manipulation of the argument ip/mask/gateway leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

CVE-2026-10061

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected is the function formWPS of the file /goform/formWPS. The manipulation of the argument peerPin results in command injection. The attack can be executed remotely. The exploit has been made public and could be used. The vendor...

CVE-2026-10062

A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formSetRoute of the file /goform/formSetRoute. This manipulation of the argument ip/mask/gateway causes stack-based buffer overflow. The attack is possible to be carried out remotely. The...

CVE-2026-10063

A vulnerability was identified in TRENDnet TEW-432BRP 3.10B20. Affected by this issue is the function formWPS of the file /goform/formWPS. Such manipulation of the argument peerPin leads to stack-based buffer overflow. The attack may be performed from remote. The exploit is publicly available and...

The vulnerability of the formWPS() function in the /goform/formWPS file of TRENDnet TEW-432BRP microprogramming router software allows a hacker to execute arbitrary commands.

The vulnerability of the formWPS function in the /goform/formWPS file of TRENDnet TEW-432BRP microprogramming router software is related to the failure to take measures to neutralize special elements in the output data. Exploiting this vulnerability may allow a remote attacker to execute arbitrar...

The vulnerability of the formSetPortTr() function in the /goform/formSetPortTr file of the TRENDnet TEW-432BRP router microprogramming system allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetPortTr function in the /goform/formSetPortTr file of the TRENDnet TEW-432BRP router microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or...

The vulnerability of the formSetRoute() function in the /goform/formSetRoute file of the TRENDnet TEW-432BRP router microprogramming system, which allows a hacker to execute arbitrary commands.

The vulnerability of the formSetRoute function in the /goform/formSetRoute file of the TRENDnet TEW-432BRP router microprogramming system is related to the failure to take measures to neutralize special elements in the output data. Exploiting this vulnerability may allow a remote attacker to...

CVE-2026-10122

A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. This affects the function formSetProtocolFilter of the file /goform/formSetProtocolFilter. Such manipulation of the argument protocolname leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has...

CVE-2026-10181

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. The affected element is the function formSysCmd of the file /goform/formSysCmd. Performing a manipulation of the argument submit-url results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made...

CVE-2026-10182

A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20. The impacted element is the function formWlanSetup of the file /goform/formWlanSetup. Executing a manipulation of the argument enrollee can lead to command injection. The attack can be launched remotely. The exploit has been publicly...

CVE-2026-10064

A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20. This affects the function formSetPortTr of the file /goform/formSetPortTr. Performing a manipulation of the argument specialname results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit...

CVE-2026-10179

A flaw has been found in TRENDnet TEW-432BRP 3.10B20. This issue affects the function formSetWlanEncrypt of the file /goform/formSetWlanEncrypt. This manipulation of the argument webpage causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-10158

A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20. Affected is the function formPortFw of the file /goform/formPortFw. The manipulation of the argument servername results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been released t...

CVE-2026-10121

A flaw has been found in TRENDnet TEW-432BRP 3.10B20. The impacted element is the function formSetUrlFilter of the file /goform/formSetUrlFilter. This manipulation of the argument keywordlist/keyword causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploi...

The vulnerability of the formSetProtocolFilter() function in TRENDnet TEW-432BRP router software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetProtocolFilter function in TRENDnet TEW-432BRP router software lies in the fact that the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...

The vulnerability of the formWPS() function in TRENDnet TEW-432BRP router software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formWPS function in TRENDnet TEW-432BRP router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...