CVE-2026-76589
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN_401000 of the file /sbin/mycli. The manipulation of the argument ssid results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used.
Risk Assessment
A remote attacker could exploit the buffer overflow to execute arbitrary code or cause a denial of service, potentially compromising network integrity.
Recommendation
Update the TRENDnet TEW-755AP firmware to the latest version if a patch is available, or restrict access to the administrative interface.
Other vulnerabilities in TRENDnet TEW-755AP
See all- CVE-2026-76590Critical
A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ssi. Such manipulation of the argument cameo.wan.wan_pppoe_password_00 leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.
- CVE-2026-76591High
In TRENDnet TEW-755AP up to 20260702, the log_email_server function in /cgi-bin/email.cgi of the ssi component is vulnerable to command injection. The attack can be performed remotely, and the exploit is publicly available.
Original NVD description (English source)
A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN_401000 of the file /sbin/mycli. The manipulation of the argument ssid results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS