CVE-2026-77988
MediumCVSS 6.6Exploitation Probability (EPSS)
High risk80th percentile - higher than 80% of all known CVEs
Summary
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvram_get of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
Risk Assessment
The risk includes remote execution of arbitrary commands on the device, potentially leading to full compromise of the router and network.
Recommendation
Immediately update the TRENDnet TEW-823DRU firmware to a patched version and restrict access to the management interface.
Other vulnerabilities in TRENDnet TEW-823DRU
See all- CVE-2026-75976Critical
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01, affecting the strcpy function in /cgi-bin/wan.cgi. Manipulation of wan_l2tp_password leads to stack-based buffer overflow. Remote attack is possible and exploit is public.
- CVE-2026-75984High
A command injection vulnerability was found in TRENDnet TEW-823DRU router version 1.1.02b01 in the /cgi-bin/admin.cgi file. Manipulation of the Hostname argument results in command injection. The attack can be launched remotely, and the exploit is public.
Original NVD description (English source)
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvram_get of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.