CVE-2026-75784
CriticalCVSS 10.0Summary
TRENDnet TEW-WLC100 version 1v2.07b01 contains a stack-based buffer overflow vulnerability in the function FUN_0040da4c in /usr/nginx/sbin/nginx, in the HTTP Header Handler component. Manipulation of the Server argument can lead to remote attacks.
Risk Assessment
The vulnerability allows remote code execution or device crash, potentially leading to network security compromise.
Recommendation
It is recommended to update the device firmware to the latest version and restrict access to the administrative interface.
Original NVD description (English source)
A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this issue is the function FUN_0040da4c of the file /usr/nginx/sbin/nginx of the component HTTP Header Handler. The manipulation of the argument Server results in stack-based buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.