CVE-2026-75976
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01, affecting the strcpy function in /cgi-bin/wan.cgi. Manipulation of wan_l2tp_password leads to stack-based buffer overflow. Remote attack is possible and exploit is public.
Risk Assessment
Public exploit allows remote code execution or device crash, potentially compromising network security.
Recommendation
Update firmware to a patched version and restrict administrative access.
Other vulnerabilities in TRENDnet TEW-823DRU
See all- CVE-2026-77988Medium
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvram_get of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
- CVE-2026-75984High
A command injection vulnerability was found in TRENDnet TEW-823DRU router version 1.1.02b01 in the /cgi-bin/admin.cgi file. Manipulation of the Hostname argument results in command injection. The attack can be launched remotely, and the exploit is public.
Original NVD description (English source)
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This manipulation of the argument wan_l2tp_password causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS