Log in Start free

Vulnerability · Published May 2, 2026 · Assigned by VulDB

CVE-2026-7609TRENDnet TEW-821DAP Firmware Udpate diagnostic tools_diagnostic os command injection

Medium 6.3

In plain English

A medium-severity OS command injection in TEW-821DAP from TRENDnet. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 4.5% (higher than 92% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)4.5%top 8.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A flaw has been found in TRENDnet TEW-821DAP up to 1.12B01. The impacted element is the function tools_diagnostic of the file /tmp/diagnostic of the component Firmware Udpate. This manipulation causes os command injection. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor explains: "That firmware version will only work on our hardware version v1.xR. We have already EOL that product 8 years ago and are no longer selling". This vulnerability only affects products that are no longer supported by the maintainer.

Affected products (as reported)

VendorProductVersions
TRENDnet TEW-821DAP 1.12B01

Weakness: CWE-78, CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

References