# cve.now: Trendnet

The newest entries naming Trendnet as an affected vendor (up to 200), of 92 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-109157](https://cve.now/CVE-2026-109157.md): TRENDnet TEW-432BRP formTcpipSetup stack-based overflow (CVSS 9.4)
- [CVE-2026-108804](https://cve.now/CVE-2026-108804.md): TRENDnet TEW-751DR/TEW-752DRU/TEW733GR Web Management Backend pigwidgeon.cgi fwrite os command injection (CVSS 10.0)
- [CVE-2026-77988](https://cve.now/CVE-2026-77988.md): TRENDnet TEW-823DRU CLI Configuration Tool nvram\_get command injection (CVSS 5.1)
- [CVE-2026-77946](https://cve.now/CVE-2026-77946.md): TRENDnet TEW-821DAP NTP Timezone Configuration apply\_time.cgi uci\_safe\_get stack-based overflow (CVSS 10.0)
- [CVE-2026-77945](https://cve.now/CVE-2026-77945.md): TRENDnet TEW-821DAP ssi upload.cgi command injection (CVSS 5.3)
- [CVE-2026-76591](https://cve.now/CVE-2026-76591.md): TRENDnet TEW-755AP ssi email.cgi log\_email\_server command injection (CVSS 5.3)
- [CVE-2026-76590](https://cve.now/CVE-2026-76590.md): TRENDnet TEW-755AP ssi wan.cgi stack-based overflow (CVSS 9.4)
- [CVE-2026-76589](https://cve.now/CVE-2026-76589.md): TRENDnet TEW-755AP mycli FUN\_401000 stack-based overflow (CVSS 9.4)
- [CVE-2026-76584](https://cve.now/CVE-2026-76584.md): TRENDnet TV-IP751WIC alphapd set\_time.cgi stack-based overflow (CVSS 9.4)
- [CVE-2026-76583](https://cve.now/CVE-2026-76583.md): TRENDnet TV-IP751WIC alphapd set\_time.cgi command injection (CVSS 5.3)
- [CVE-2026-76582](https://cve.now/CVE-2026-76582.md): TRENDnet TEW-821DAP ssi ping.cgi system command injection (CVSS 5.3)
- [CVE-2026-75985](https://cve.now/CVE-2026-75985.md): TRENDnet Router ping.cgi command injection (CVSS 5.3)
- [CVE-2026-75984](https://cve.now/CVE-2026-75984.md): TRENDnet TEW-823DRU admin.cgi command injection (CVSS 5.3)
- [CVE-2026-75976](https://cve.now/CVE-2026-75976.md): TRENDnet TEW-823DRU NVRAM wan.cgi strcpy stack-based overflow (CVSS 9.4)
- [CVE-2026-75877](https://cve.now/CVE-2026-75877.md): TRENDnet TV-IP751WIC alphapd FUN\_0043372C stack-based overflow (CVSS 9.4)
- [CVE-2026-75784](https://cve.now/CVE-2026-75784.md): TRENDnet TEW-WLC100 HTTP Header nginx FUN\_0040da4c stack-based overflow (CVSS 10.0)
- [CVE-2026-75783](https://cve.now/CVE-2026-75783.md): TRENDnet TEW-WLC100P DHCP blobmsg netifd stack-based overflow (CVSS 9.4)
- [CVE-2026-19891](https://cve.now/CVE-2026-19891.md): TRENDnet TEW-WLC100 IKE Phase 1 Aggressive Mode racoon.conf missing encryption (CVSS 6.3)
- [CVE-2026-19841](https://cve.now/CVE-2026-19841.md): TRENDNET TEW-813DRU vsftpd vsftpd.conf default permission (CVSS 2.3)
- [CVE-2026-19830](https://cve.now/CVE-2026-19830.md): TRENDnet TEW-816DRM bftpd bftpd.conf allocation of resources (CVSS 6.9)
- [CVE-2026-15487](https://cve.now/CVE-2026-15487.md): TRENDnet TEW-821DAP Firmware Update system\_ntp sub\_41FBD0 os command injection (CVSS 5.3)
- [CVE-2026-15486](https://cve.now/CVE-2026-15486.md): TRENDnet TEW-821DAP Firmware Update tools\_ddns sub\_42026C os command injection (CVSS 5.3)
- [CVE-2026-15485](https://cve.now/CVE-2026-15485.md): TRENDnet TEW-821DAP DNS Lookup tools\_nslookup sub\_43F2C4 os command injection (CVSS 5.3)
- [CVE-2026-15484](https://cve.now/CVE-2026-15484.md): TRENDnet TEW-821DAP ssi tools\_nslookup sub\_41EC14 buffer overflow (CVSS 8.7)
- [CVE-2026-15483](https://cve.now/CVE-2026-15483.md): TRENDnet TEW-821DAP ssi tools\_nslookup sub\_41EC14 buffer overflow (CVSS 8.7)
- [CVE-2026-15481](https://cve.now/CVE-2026-15481.md): Trendnet TEW-635BRM IPoA WAN Connection Setup rc ipoa\_test command injection (CVSS 8.7)
- [CVE-2026-15480](https://cve.now/CVE-2026-15480.md): Trendnet TEW-635BRM Web Service rc start\_httpd stack-based overflow (CVSS 8.7)
- [CVE-2026-10183](https://cve.now/CVE-2026-10183.md): TRENDnet TEW-432BRP formWlanSetup stack-based overflow (CVSS 8.7)
- [CVE-2026-10182](https://cve.now/CVE-2026-10182.md): TRENDnet TEW-432BRP formWlanSetup command injection (CVSS 5.3)
- [CVE-2026-10181](https://cve.now/CVE-2026-10181.md): TRENDnet TEW-432BRP formSysCmd stack-based overflow (CVSS 8.7)
- [CVE-2026-10180](https://cve.now/CVE-2026-10180.md): TRENDnet TEW-432BRP formSysCmd command injection (CVSS 5.3)
- [CVE-2026-10179](https://cve.now/CVE-2026-10179.md): TRENDnet TEW-432BRP formSetWlanEncrypt stack-based overflow (CVSS 8.7)
- [CVE-2026-10162](https://cve.now/CVE-2026-10162.md): TRENDnet TEW-432BRP formSetPassword stack-based overflow (CVSS 8.7)
- [CVE-2026-10161](https://cve.now/CVE-2026-10161.md): TRENDnet TEW-432BRP formResetStatistic stack-based overflow (CVSS 8.7)
- [CVE-2026-10160](https://cve.now/CVE-2026-10160.md): TRENDnet TEW-432BRP formSetEnableWizard stack-based overflow (CVSS 8.7)
- [CVE-2026-10159](https://cve.now/CVE-2026-10159.md): TRENDnet TEW-432BRP formSysLog stack-based overflow (CVSS 8.7)
- [CVE-2026-10158](https://cve.now/CVE-2026-10158.md): TRENDnet TEW-432BRP formPortFw stack-based overflow (CVSS 8.7)
- [CVE-2026-10123](https://cve.now/CVE-2026-10123.md): TRENDnet TEW-432BRP formSetDomainFilter stack-based overflow (CVSS 8.7)
- [CVE-2026-10122](https://cve.now/CVE-2026-10122.md): TRENDnet TEW-432BRP formSetProtocolFilter stack-based overflow (CVSS 8.7)
- [CVE-2026-10121](https://cve.now/CVE-2026-10121.md): TRENDnet TEW-432BRP formSetUrlFilter stack-based overflow (CVSS 8.7)
- [CVE-2026-10120](https://cve.now/CVE-2026-10120.md): TRENDnet TEW-432BRP formSetFirewallRule stack-based overflow (CVSS 8.7)
- [CVE-2026-10119](https://cve.now/CVE-2026-10119.md): TRENDnet TEW-432BRP formSetMACFilter stack-based overflow (CVSS 8.7)
- [CVE-2026-10064](https://cve.now/CVE-2026-10064.md): TRENDnet TEW-432BRP formSetPortTr stack-based overflow (CVSS 5.3)
- [CVE-2026-10063](https://cve.now/CVE-2026-10063.md): TRENDnet TEW-432BRP formWPS stack-based overflow (CVSS 8.7)
- [CVE-2026-10062](https://cve.now/CVE-2026-10062.md): TRENDnet TEW-432BRP formSetRoute stack-based overflow (CVSS 8.7)
- [CVE-2026-10061](https://cve.now/CVE-2026-10061.md): TRENDnet TEW-432BRP formWPS command injection (CVSS 5.3)
- [CVE-2026-10060](https://cve.now/CVE-2026-10060.md): TRENDnet TEW-432BRP formSetRoute command injection (CVSS 5.3)
- [CVE-2026-7611](https://cve.now/CVE-2026-7611.md): TRENDnet TEW-821DAP Firmware Update cameo\_dev.sh platform\_do\_upgrade\_cameo\_dev data authenticity (CVSS 6.3)
- [CVE-2026-7610](https://cve.now/CVE-2026-7610.md): TRENDnet TEW-821DAP Firmware Update ssi cleartext transmission (CVSS 6.3)
- [CVE-2026-7609](https://cve.now/CVE-2026-7609.md): TRENDnet TEW-821DAP Firmware Udpate diagnostic tools\_diagnostic os command injection (CVSS 5.3)
- [CVE-2026-7608](https://cve.now/CVE-2026-7608.md): TRENDnet TEW-821DAP tools\_diagnostic os command injection (CVSS 5.1)
- [CVE-2026-7607](https://cve.now/CVE-2026-7607.md): TRENDnet TEW-821DAP Firmware Udpate auto\_update\_firmware buffer overflow (CVSS 8.7)
- [CVE-2026-7606](https://cve.now/CVE-2026-7606.md): TRENDnet TEW-821DAP Firmware Update new\_gui\_update\_firmware data authenticity (CVSS 6.3)
- [CVE-2026-5355](https://cve.now/CVE-2026-5355.md): Trendnet TEW-657BRM setup.cgi vpn\_drop os command injection (CVSS 5.3)
- [CVE-2026-5354](https://cve.now/CVE-2026-5354.md): Trendnet TEW-657BRM setup.cgi vpn\_connect os command injection (CVSS 5.3)
- [CVE-2026-5353](https://cve.now/CVE-2026-5353.md): Trendnet TEW-657BRM setup.cgi ping\_test os command injection (CVSS 5.3)
- [CVE-2026-5352](https://cve.now/CVE-2026-5352.md): Trendnet TEW-657BRM setup.cgi edit os command injection (CVSS 5.3)
- [CVE-2026-5351](https://cve.now/CVE-2026-5351.md): Trendnet TEW-657BRM setup.cgi add\_wps\_client os command injection (CVSS 5.3)
- [CVE-2026-5350](https://cve.now/CVE-2026-5350.md): Trendnet TEW-657BRM setup.cgi update\_pcdb stack-based overflow (CVSS 8.7)
- [CVE-2026-5349](https://cve.now/CVE-2026-5349.md): Trendnet TEW-657BRM setup.cgi add\_apcdb stack-based overflow (CVSS 8.7)
- [CVE-2026-5184](https://cve.now/CVE-2026-5184.md): TRENDnet TEW-713RE setSysAdm command injection (CVSS 5.3)
- [CVE-2026-5183](https://cve.now/CVE-2026-5183.md): TRENDnet TEW-713RE addRouting sub\_421494 command injection (CVSS 5.3)
- [CVE-2026-4354](https://cve.now/CVE-2026-4354.md): TRENDnet TEW-824DRU Web apply\_sec.cgi sub\_420A78 cross site scripting (CVSS 5.1)
- [CVE-2026-4172](https://cve.now/CVE-2026-4172.md): TRENDnet TEW-632BRP HTTP POST Request ping\_response.cgi stack-based overflow (CVSS 8.6)
- [CVE-2025-15472](https://cve.now/CVE-2025-15472.md): TRENDnet TEW-811DRU httpd uapply.cgi setDeviceURL os command injection (CVSS 8.6)
- [CVE-2025-15471](https://cve.now/CVE-2025-15471.md): TRENDnet TEW-713RE formFSrvX os command injection (CVSS 9.3)
- [CVE-2025-15139](https://cve.now/CVE-2025-15139.md): TRENDnet TEW-822DRE formWsc sub\_43ACF4 command injection (CVSS 5.3)
- [CVE-2025-15137](https://cve.now/CVE-2025-15137.md): TRENDnet TEW-800MB NTPSyncWithHost.cgi sub\_F934 command injection (CVSS 8.7)
- [CVE-2025-15136](https://cve.now/CVE-2025-15136.md): TRENDnet TEW-800MB Management wizardset do\_setWizard\_asp command injection (CVSS 8.7)
- [CVE-2025-10107](https://cve.now/CVE-2025-10107.md): TRENDnet TEW-831DR formSysCmd command injection (CVSS 5.1)
- [CVE-2025-8759](https://cve.now/CVE-2025-8759.md): TRENDnet TN-200 Lighttpd hard-coded key (CVSS 6.3)
- [CVE-2025-8758](https://cve.now/CVE-2025-8758.md): TRENDnet TEW-822DRE vsftpd least privilege violation (CVSS 7.3)
- [CVE-2025-8757](https://cve.now/CVE-2025-8757.md): TRENDnet TV-IP110WN Embedded Boa Web Server boa.conf least privilege violation (CVSS 7.3)
- [CVE-2025-8731](https://cve.now/CVE-2025-8731.md): TRENDnet TI-G160i/TI-PG102i/TPL-430AP SSH Service default credentials (CVSS 9.3)
- [CVE-2025-5870](https://cve.now/CVE-2025-5870.md): TRENDnet TV-IP121W Web Interface setup.cgi improper authentication (CVSS 6.9)
- [CVE-2025-2960](https://cve.now/CVE-2025-2960.md): TRENDnet TEW-637AP/TEW-638APB HTTP Request goahead sub\_41DED0 null pointer dereference (CVSS 7.1)
- [CVE-2025-2959](https://cve.now/CVE-2025-2959.md): TRENDnet TEW-410APB HTTP Request httpd sub\_4019A0 null pointer dereference (CVSS 7.1)
- [CVE-2025-2958](https://cve.now/CVE-2025-2958.md): TRENDnet TEW-818DRU HTTP Request httpd denial of service (CVSS 7.1)
- [CVE-2025-2957](https://cve.now/CVE-2025-2957.md): TRENDnet TEW-411BRP+ HTTP Request httpd sub\_401DB0 null pointer dereference (CVSS 7.1)
- [CVE-2025-2956](https://cve.now/CVE-2025-2956.md): TRENDnet TI-G102i HTTP Request lighttpd plugins\_call\_handle\_uri\_raw null pointer dereference (CVSS 7.1)
- [CVE-2024-0920](https://cve.now/CVE-2024-0920.md): TRENDnet TEW-822DRE POST Request admin\_ping.htm command injection (CVSS 7.2)
- [CVE-2024-0919](https://cve.now/CVE-2024-0919.md): TRENDnet TEW-815DAP POST Request do\_setNTP command injection (CVSS 8.8)
- [CVE-2024-0918](https://cve.now/CVE-2024-0918.md): TRENDnet TEW-800MB POST Request os command injection (CVSS 7.2)
- [CVE-2023-0640](https://cve.now/CVE-2023-0640.md): TRENDnet TEW-652BRP Web Interface ping.ccp command injection (CVSS 7.2)
- [CVE-2023-0639](https://cve.now/CVE-2023-0639.md): TRENDnet TEW-652BRP Web Management Interface get\_set.ccp cross site scripting (CVSS 2.4)
- [CVE-2023-0638](https://cve.now/CVE-2023-0638.md): TRENDnet TEW-811DRU Web Interface command injection (CVSS 7.2)
- [CVE-2023-0637](https://cve.now/CVE-2023-0637.md): TRENDnet TEW-811DRU Web Management Interface wan.asp memory corruption (CVSS 6.5)
- [CVE-2023-0618](https://cve.now/CVE-2023-0618.md): TRENDnet TEW-652BRP Web Service cfg\_op.ccp memory corruption (CVSS 7.5)
- [CVE-2023-0617](https://cve.now/CVE-2023-0617.md): TRENDNet TEW-811DRU httpd guestnetwork.asp buffer overflow (CVSS 7.5)
- [CVE-2023-0613](https://cve.now/CVE-2023-0613.md): TRENDnet TEW-811DRU httpd security.asp memory corruption (CVSS 7.5)
- [CVE-2023-0612](https://cve.now/CVE-2023-0612.md): TRENDnet TEW-811DRU httpd basic.asp buffer overflow (CVSS 7.5)
- [CVE-2023-0611](https://cve.now/CVE-2023-0611.md): TRENDnet TEW-652BRP Web Management Interface get\_set.ccp command injection (CVSS 8.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/trendnet
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.