CVE-2026-76583

HighCVSS 7.4

Published: 19/08/2026(UTC)Translated: 20/08/2026(UTC)NVD NIST

Summary

In TRENDnet TV-IP751WIC version 11.03.03, a command injection vulnerability exists in the file /cgi-bin/admin/set_time.cgi of the alphapd component. Manipulation leads to command injection. The attack can be initiated remotely, and the exploit is publicly available.

Risk Assessment

The risk includes full device compromise, which could lead to loss of confidentiality, integrity, and availability of data and network.

Recommendation

Immediately update the device firmware and restrict access to the administrative panel from trusted networks.

Original NVD description (English source)

A vulnerability was identified in TRENDnet TV-IP751WIC 11.03.03. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/admin/set_time.cgi of the component alphapd. The manipulation leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used.