85 matches found
EUVD-2026-62973
A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ssi. Such manipulation of the argument cameo.wan.wanpppoepassword00 leads to stack-based buffer overflow. The attack can be...
EUVD-2026-63136
A security flaw has been discovered in TRENDnet TEW-755AP up to 20260702. This affects the function logemailserver of the file /cgi-bin/email.cgi of the component ssi. Performing a manipulation results in command injection. The attack is possible to be carried out remotely. The exploit has been...
EUVD-2026-63101
A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN401000 of the file /sbin/mycli. The manipulation of the argument ssid results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used...
CVE-2026-76590
A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ssi. Such manipulation of the argument cameo.wan.wanpppoepassword00 leads to stack-based buffer overflow. The attack can be...
CVE-2026-76591
A security flaw has been discovered in TRENDnet TEW-755AP up to 20260702. This affects the function logemailserver of the file /cgi-bin/email.cgi of the component ssi. Performing a manipulation results in command injection. The attack is possible to be carried out remotely. The exploit has been...
CVE-2026-76589
A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN401000 of the file /sbin/mycli. The manipulation of the argument ssid results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used...
CVE-2026-76591
The TRENDnet TEW-755AP's log_email_server function in /cgi-bin/email.cgi (ssi component) is vulnerable to remote command injection. CVSS 3.1 scores it HIGH (7.4); a public PoC exploit exists at https://github.com/meishigana/CVE/tree/main/team15_20260702/14_755ap-ssi-cmdi. No patch version or vend...
CVE-2026-76591 TRENDnet TEW-755AP ssi email.cgi log_email_server command injection
A security flaw has been discovered in TRENDnet TEW-755AP up to 20260702. This affects the function logemailserver of the file /cgi-bin/email.cgi of the component ssi. Performing a manipulation results in command injection. The attack is possible to be carried out remotely. The exploit has been...
CVE-2026-76591 TRENDnet TEW-755AP ssi email.cgi log_email_server command injection
A security flaw has been discovered in TRENDnet TEW-755AP up to 20260702. This affects the function logemailserver of the file /cgi-bin/email.cgi of the component ssi. Performing a manipulation results in command injection. The attack is possible to be carried out remotely. The exploit has been...
CVE-2026-76590 TRENDnet TEW-755AP ssi wan.cgi stack-based overflow
A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ssi. Such manipulation of the argument cameo.wan.wanpppoepassword00 leads to stack-based buffer overflow. The attack can be...
CVE-2026-76590
A stack-based buffer overflow exists in the ssi component of TRENDnet TEW-755AP (firmware up to 20260702). Manipulating the cameo.wan.wan_pppoe_password_00 argument in /cgi-bin/wan.cgi triggers overflow, exploitable remotely with low privileges; a public PoC is available at https://github.com/mei...
CVE-2026-76590 TRENDnet TEW-755AP ssi wan.cgi stack-based overflow
A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ssi. Such manipulation of the argument cameo.wan.wanpppoepassword00 leads to stack-based buffer overflow. The attack can be...
CVE-2026-76589 TRENDnet TEW-755AP mycli FUN_401000 stack-based overflow
A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN401000 of the file /sbin/mycli. The manipulation of the argument ssid results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used...
CVE-2026-76589 TRENDnet TEW-755AP mycli FUN_401000 stack-based overflow
A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN401000 of the file /sbin/mycli. The manipulation of the argument ssid results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used...
CVE-2026-76589
A stack-based buffer overflow in the FUN_401000 function of /sbin/mycli on TRENDnet TEW-755AP firmware up to 20260702 allows remote attackers to crash or take over the device by sending a crafted ssid argument. A proof-of-concept exploit exists at https://github.com/meishigana/CVE/blob/main/team1...
PT-2026-78834
A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ssi. Such manipulation of the argument cameo.wan.wan pppoe password 00 leads to stack-based buffer overflow. The attack can be...
PT-2026-78836
Name of the Vulnerable Software and Affected Versions TRENDnet TEW-755AP versions prior to 20260702 Description A command injection flaw exists in the ssi component within the /cgi-bin/email.cgi endpoint. The issue resides in the log email server function, allowing a remote attacker to execute...
PT-2026-78833
A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN 401000 of the file /sbin/mycli. The manipulation of the argument ssid results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used...
CVE-2021-28846
A Format String vulnerablity exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial of service due to a logic bug at address 0x40dcd0 when calling fprintf with "%s: key len = %d, too long\...