Dashboard / CVE-2026-7609

CVE-2026-7609

LOW
INFO Priority: 0.10 BB Relevance: 55/100
Published: 2026-05-02 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: X
AT: None
VC: Low
VI: Low
VA: Low

Description

A flaw has been found in TRENDnet TEW-821DAP up to 1.12B01. The impacted element is the function tools_diagnostic of the file /tmp/diagnostic of the component Firmware Udpate. This manipulation causes os command injection. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor explains: "That firmware version will only work on our hardware version v1.xR. We have already EOL that product 8 years ago and are no longer selling". This vulnerability only affects products that are no longer supported by the maintainer.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
trendnet tew-821dap_firmware 1.12b01

References & Advisories (4)

https://vuldb.com/submit/806216
Third Party Advisory VDB Entry
https://vuldb.com/vuln/360566
Third Party Advisory VDB Entry
https://vuldb.com/vuln/360566/cti
Permissions Required VDB Entry

Bug Bounty Relevance

55 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

2.1 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

4.53%
Raw Score 0.045300
Percentile 91.5%
Date 2026-10-29

EPSS Trend

2026-10-29
0.04530
2026-10-28
0.04530

Intelligence Sources

nvd ref →

External Links