CVE-2026-77945

HIGH
7.4CVSS v3
6.5CVSS v2
1.28% EPSS (exploit probability)
CWE-74CWE

Description

A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05. Affected is an unknown function of the file /cgi-bin/upload.cgi of the component ssi. Performing a manipulation of the argument filename results in command injection. The attack may be initiated remotely. The exploit has been made public and could be used.

CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Affected routers (1)

VendorModelMatched viaAffected versionsFixed inPatch Status
TRENDnet TRENDnet TEW-821DAP Unpatched

External references