CVE-2026-75984
HighCVSS 7.4Exploitation Probability (EPSS)
Elevated risk68th percentile - higher than 68% of all known CVEs
Summary
A command injection vulnerability was found in TRENDnet TEW-823DRU router version 1.1.02b01 in the /cgi-bin/admin.cgi file. Manipulation of the Hostname argument results in command injection. The attack can be launched remotely, and the exploit is public.
Risk Assessment
A remote attacker could take control of the router, change network settings, intercept data, or use the device as a launching point for attacks on other systems.
Recommendation
Update the router firmware to the latest version and restrict access to the administrative interface to trusted networks only.
Original NVD description (English source)
A vulnerability was detected in TRENDnet TEW-823DRU 1.1.02b01. Impacted is an unknown function of the file /cgi-bin/admin.cgi. The manipulation of the argument Hostname results in command injection. The attack can be launched remotely. The exploit is now public and may be used.