← Vulnerability feed

Vulnerability record · CVE-2026-7606 · published 2 May 2026

CVE-2026-7606: Trendnet tew-821dap firmware insufficient verification of data authenticity vulnerability

Trendnet · Tew 821dap Firmware

A weakness has been identified in TRENDnet TEW-821DAP 1.12B01. This issue affects the function find_hwid/new_gui_update_firmware of the component Firmware Update Handler. Executing a manipulation of the argument dest can lead to insufficient verification of data authenticity. The attack can be launched remotely. Attacks of this nature are highly complex. The exploitability is assessed as difficult. The vendor explains: "That firmware version will only work on our hardware version v1.xR. We have already EOL that product 8 years ago and are no longer selling". This vulnerability only affects products that are no longer supported by the maintainer.

6.3 CVSS 4.0 Medium EPSS 0.31% · top 78.6% CWE-345 · Insufficient verification of data authenticity
6.3CVSS 4.0 base score, v2 2.6
0.31%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References, 1 tagged exploit
17 Jun 2026Last modified by NVD

Description

A weakness has been identified in TRENDnet TEW-821DAP 1.12B01. This issue affects the function find_hwid/new_gui_update_firmware of the component Firmware Update Handler. Executing a manipulation of the argument dest can lead to insufficient verification of data authenticity. The attack can be launched remotely. Attacks of this nature are highly complex. The exploitability is assessed as difficult. The vendor explains: "That firmware version will only work on our hardware version v1.xR. We have already EOL that product 8 years ago and are no longer selling". This vulnerability only affects products that are no longer supported by the maintainer.

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Trendnet/TEW-821DAP_Auth.md ExploitThird Party Advisory
https://vuldb.com/submit/806213 Third Party AdvisoryVDB Entry
https://vuldb.com/vuln/360563 Third Party AdvisoryVDB Entry
https://vuldb.com/vuln/360563/cti Permissions RequiredVDB Entry

Track CVE-2026-7606 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.7CVE-2026-7607Trendnet tew-821dap firmware memory buffer overflow vulnerabilityA security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function auto_update_firmware of the component Firmware Ud…EPSS 1.0%8.0CVE-2023-51146Trendnet tew-821dap firmware stack-based buffer overflow vulnerabilityBuffer Overflow vulnerability in TRENDnet AC1200 TEW-821DAP with firmware version 3.00b06 allows an attacker to execute arbitrary code via the adm_ad…EPSS 0.50%8.0CVE-2023-51147Trendnet tew-821dap firmware stack-based buffer overflow vulnerabilityBuffer Overflow vulnerability in TRENDnet Trendnet AC1200 TEW-821DAP with firmware version 3.00b06 allows an attacker to execute arbitrary code via t…EPSS 0.50%8.0CVE-2023-51148Trendnet tew-821dap firmware stack-based buffer overflow vulnerabilityAn issue in TRENDnet Trendnet AC1200 Dual Band PoE Indoor Wireless Access Point TEW-821DAP v.3.00b06 allows an attacker to execute arbitrary code via…EPSS 0.53%6.3CVE-2026-7611Trendnet tew-821dap firmware insufficient verification of data authenticity vulnerabilityA vulnerability was found in TRENDnet TEW-821DAP up to 1.12B01. This impacts the function platform_do_upgrade_cameo_dev of the file cameo_dev.sh of t…EPSS 0.31%2.9CVE-2026-7610Trendnet tew-821dap firmware cleartext transmission vulnerabilityA vulnerability has been found in TRENDnet TEW-821DAP 1.12B01. This affects an unknown function of the file /www/cgi/ssi of the component Firmware Up…EPSS 0.45%2.1CVE-2026-7609Trendnet tew-821dap firmware command injection vulnerabilityA flaw has been found in TRENDnet TEW-821DAP up to 1.12B01. The impacted element is the function tools_diagnostic of the file /tmp/diagnostic of the …EPSS 5.7%2.0CVE-2026-7608Trendnet tew-821dap firmware command injection vulnerabilityA vulnerability was detected in TRENDnet TEW-821DAP up to 1.12B01. The affected element is the function tools_diagnostic. The manipulation results in…EPSS 9.8%

Source: NIST National Vulnerability Database (record CVE-2026-7606), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.