CVE-2026-76584
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/set_time.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
Risk Assessment
A remote attacker could exploit the buffer overflow to execute arbitrary code or cause a denial of service, potentially compromising network integrity.
Recommendation
Update the TRENDnet TV-IP751WIC firmware to the latest version if a patch is available, or restrict access to the administrative interface.
Other vulnerabilities in TRENDnet TV-IP751WIC
See all- CVE-2026-75877Critical
A flaw in TRENDnet TV-IP751WIC (version 11.03.03) affects functions SystemNetworkChanged, SystemDDNSChanged, SystemEmailChanged, SystemFTPChanged, websCheckRealm, FUN_00432574, and FUN_0043372C in the alphapd component. Manipulation leads to stack-based buffer overflow, exploitable remotely.
- CVE-2026-76583High
In TRENDnet TV-IP751WIC version 11.03.03, a command injection vulnerability exists in the file /cgi-bin/admin/set_time.cgi of the alphapd component. Manipulation leads to command injection. The attack can be initiated remotely, and the exploit is publicly available.
Original NVD description (English source)
A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/set_time.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS