Vulnerability · Published Aug 15, 2026 · Assigned by VulDB

CVE-2026-19891TRENDnet TEW-WLC100 IKE Phase 1 Aggressive Mode racoon.conf missing encryption

Low 3.7

In plain English

A low-severity security flaw in TEW-WLC100 from TRENDnet. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).

Severity (CVSS 3.1)3.7Low

Exploit odds (30 days)0.2%top 92.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability was determined in TRENDnet TEW-WLC100 2.05b02. This affects an unknown function of the file /etc/racoon.conf of the component IKE Phase 1 Aggressive Mode. This manipulation of the argument exchange_mode causes missing encryption of sensitive data. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is reported as difficult. The vendor was contacted early about this disclosure.

Affected products (as reported)

Vendor	Product	Versions
TRENDnet	TEW-WLC100	2.05b02

Weakness: CWE-311, CWE-310 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:R

References

VDB-390080 | TRENDnet TEW-WLC100 IKE Phase 1 Aggressive Mode racoon.conf missing encryption vdb-entry, technical-description
VDB-390080 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
CVE-2026-19891 | CVE Analysis and Report third-party-advisory
Submit #870587 | TRENDnet TEW-WLC100 TEW-WLC100 2.05b02 Misconfiguration third-party-advisory
https://app.notion.com/p/TEW-WLC100-2-05b02-38b1f5ba989080f993facb660f17358e?source=copy_link related