CVE-2026-76583
HighCVSS 7.4Exploitation Probability (EPSS)
Elevated risk62th percentile - higher than 62% of all known CVEs
Summary
In TRENDnet TV-IP751WIC version 11.03.03, a command injection vulnerability exists in the file /cgi-bin/admin/set_time.cgi of the alphapd component. Manipulation leads to command injection. The attack can be initiated remotely, and the exploit is publicly available.
Risk Assessment
The risk includes full device compromise, which could lead to loss of confidentiality, integrity, and availability of data and network.
Recommendation
Immediately update the device firmware and restrict access to the administrative panel from trusted networks.
Other vulnerabilities in TRENDnet TV-IP751WIC
See all- CVE-2026-76584Critical
A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/set_time.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
- CVE-2026-75877Critical
A flaw in TRENDnet TV-IP751WIC (version 11.03.03) affects functions SystemNetworkChanged, SystemDDNSChanged, SystemEmailChanged, SystemFTPChanged, websCheckRealm, FUN_00432574, and FUN_0043372C in the alphapd component. Manipulation leads to stack-based buffer overflow, exploitable remotely.
Original NVD description (English source)
A vulnerability was identified in TRENDnet TV-IP751WIC 11.03.03. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/admin/set_time.cgi of the component alphapd. The manipulation leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS