Vulnerability · Published Aug 19, 2026 · Assigned by VulDB
CVE-2026-76582TRENDnet TEW-821DAP ssi ping.cgi system command injection
High 7.4
In plain English
A high-severity command injection in TEW-821DAP from TRENDnet. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.8% (higher than 78% of all known vulnerabilities).
Severity (CVSS 3.1)7.4High
Exploit odds (30 days)1.8%top 21.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected is the function popen/system of the file /cgi-bin/ping.cgi of the component ssi. Executing a manipulation of the argument ipaddr can lead to command injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TRENDnet | TEW-821DAP | 2.2.01b05 |
Weakness: CWE-77, CWE-74 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-393041 | TRENDnet TEW-821DAP ssi ping.cgi system command injection vdb-entry, technical-description
- VDB-393041 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- CVE-2026-76582 | CVE Analysis and Report third-party-advisory
- Submit #877791 | TRENDnet TEW-821DAP TEW-821DAP Command Injection third-party-advisory
- https://github.com/meishigana/CVE/tree/main/team15_20260702/06_821dap-ssi-remote-cmdi exploit