Vulnerability · Published Aug 18, 2026 · Assigned by VulDB
CVE-2026-75783TRENDnet TEW-WLC100P DHCP blobmsg netifd stack-based overflow
Critical 9.6
In plain English
A critical-severity stack buffer overflow in TEW-WLC100P from TRENDnet. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities).
Official description
A security vulnerability has been detected in TRENDnet TEW-WLC100P 12.07b01. Affected by this vulnerability is an unknown functionality of the file /sbin/netifd of the component DHCP blobmsg Handler. The manipulation leads to stack-based buffer overflow. The attack must be carried out from within the local network. The exploit has been disclosed publicly and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TRENDnet | TEW-WLC100P | 12.07b01 |
Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R
References
- VDB-391524 | TRENDnet TEW-WLC100P DHCP blobmsg netifd stack-based overflow vdb-entry
- VDB-391524 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- CVE-2026-75783 | CVE Analysis and Report third-party-advisory
- Submit #877772 | TRENDnet TEW-WLC100P TEW-WLC100P Stack-based Buffer Overflow third-party-advisory
- https://github.com/meishigana/CVE/tree/main/team15_20260702/01_wlc100p-netifd related
- https://github.com/meishigana/CVE/blob/main/team15_20260702/01_wlc100p-netifd/poc/poc-netifd-overflow.py exploit