CVE-2026-75985
HighCVSS 7.4Exploitation Probability (EPSS)
Elevated risk68th percentile - higher than 68% of all known CVEs
Summary
A command injection vulnerability was found in TRENDnet Router version 1.1.02b01 in the /cgi-bin/ping.cgi file, in an unknown function. Manipulation of the wan_type argument causes command injection. The attack can be initiated remotely, and the exploit has been published.
Risk Assessment
A remote attacker could take control of the router, alter network configuration, intercept traffic, or use the device for further attacks within the network.
Recommendation
Update the router firmware to the latest version if available, and restrict access to the administrative panel and network services.
Original NVD description (English source)
A flaw has been found in TRENDnet Router 1.1.02b01. The affected element is an unknown function of the file /cgi-bin/ping.cgi. This manipulation of the argument wan_type causes command injection. The attack may be initiated remotely. The exploit has been published and may be used.