CVE-2026-75984
HighCVSS 7.4Exploitation Probability (EPSS)
Elevated risk68th percentile - higher than 68% of all known CVEs
Summary
A command injection vulnerability was found in TRENDnet TEW-823DRU router version 1.1.02b01 in the /cgi-bin/admin.cgi file. Manipulation of the Hostname argument results in command injection. The attack can be launched remotely, and the exploit is public.
Risk Assessment
A remote attacker could take control of the router, change network settings, intercept data, or use the device as a launching point for attacks on other systems.
Recommendation
Update the router firmware to the latest version and restrict access to the administrative interface to trusted networks only.
Other vulnerabilities in TRENDnet TEW-823DRU
See all- CVE-2026-75976Critical
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01, affecting the strcpy function in /cgi-bin/wan.cgi. Manipulation of wan_l2tp_password leads to stack-based buffer overflow. Remote attack is possible and exploit is public.
- CVE-2026-77988Medium
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvram_get of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
Original NVD description (English source)
A vulnerability was detected in TRENDnet TEW-823DRU 1.1.02b01. Impacted is an unknown function of the file /cgi-bin/admin.cgi. The manipulation of the argument Hostname results in command injection. The attack can be launched remotely. The exploit is now public and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS