Vulnerability · Published Aug 18, 2026 · Assigned by VulDB
CVE-2026-75784TRENDnet TEW-WLC100 HTTP Header nginx FUN_0040da4c stack-based overflow
Critical 10.0
In plain English
A critical-severity stack buffer overflow in TEW-WLC100 from TRENDnet. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities).
Severity (CVSS 3.1)10.0Critical
Exploit odds (30 days)1.1%top 34.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this issue is the function FUN_0040da4c of the file /usr/nginx/sbin/nginx of the component HTTP Header Handler. The manipulation of the argument Server results in stack-based buffer overflow. The attack may be launched remotely. The exploit is now public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TRENDnet | TEW-WLC100 | 1v2.07b01 |
Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R
References
- VDB-391525 | TRENDnet TEW-WLC100 HTTP Header nginx FUN_0040da4c stack-based overflow vdb-entry, technical-description
- VDB-391525 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- CVE-2026-75784 | CVE Analysis and Report third-party-advisory
- Submit #877773 | TRENDnet TEW-WLC100 TEW-WLC100 Stack-based Buffer Overflow third-party-advisory
- https://github.com/meishigana/CVE/tree/main/team15_20260702/02_wlc100-nginx related
- https://github.com/meishigana/CVE/blob/main/team15_20260702/02_wlc100-nginx/poc/poc-nginx-overflow.py exploit