CVE-2026-19830

MediumCVSS 5.3

Published: 14/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 14/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.47%

39th percentile - higher than 39% of all known CVEs

Summary

A vulnerability in TRENDnet TEW-816DRM (version GURNC4.OT182B-C-TN-R1B028-US.EN) affects an unknown function in the file /etc/bftpd.conf of the bftpd component. Manipulation of the argument USERLIMIT_GLOBAL results in allocation of resources. The attack can be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer.

Risk Assessment

The risk includes resource exhaustion, potentially leading to denial of service.

Recommendation

Discontinue use of this product and replace it with a supported device, as the vendor will not release patches.

Original NVD description (English source)

A vulnerability was found in TRENDnet TEW-816DRM GURNC4.OT182B-C-TN-R1B028-US.EN. This impacts an unknown function of the file /etc/bftpd.conf of the component bftpd. The manipulation of the argument USERLIMIT_GLOBAL results in allocation of resources. It is possible to launch the attack remotely. This vulnerability only affects products that are no longer supported by the maintainer.