Vulnerability · Published Aug 19, 2026 · Assigned by VulDB

CVE-2026-76584TRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflow

Critical 9.9

In plain English

A critical-severity stack buffer overflow in TV-IP751WIC from TRENDnet. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 58% of all known vulnerabilities).

Severity (CVSS 3.1)9.9Critical

Exploit odds (30 days)0.9%top 41.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/set_time.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

Affected products (as reported)

Vendor	Product	Versions
TRENDnet	TV-IP751WIC	11.03.03

Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R

References

VDB-393043 | TRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflow vdb-entry, technical-description
VDB-393043 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-76584 | CVE Analysis and Report third-party-advisory
Submit #877793 | TRENDnet TV-IP751WIC TV-IP751WIC Stack-based Buffer Overflow third-party-advisory
https://github.com/meishigana/CVE/tree/main/team15_20260702/07_751wic-apd-time-cmdi related
https://github.com/meishigana/CVE/blob/main/team15_20260702/07_751wic-apd-time-cmdi/poc/poc-time-injection.py exploit