Search
Find a vulnerability
Search criteria
2 vulnerabilities found for TEW-WLC100P by TRENDnet
CVE-2026-75783 (GCVE-0-2026-75783)
Vulnerability from nvd – Published: 2026-08-18 12:45 – Updated: 2026-08-18 13:29
VLAI
EPSS
VEX
Title
TRENDnet TEW-WLC100P DHCP blobmsg netifd stack-based overflow
Summary
A security vulnerability has been detected in TRENDnet TEW-WLC100P 12.07b01. Affected by this vulnerability is an unknown functionality of the file /sbin/netifd of the component DHCP blobmsg Handler. The manipulation leads to stack-based buffer overflow. The attack must be carried out from within the local network. The exploit has been disclosed publicly and may be used.
Severity
9.6 (Critical)
9.6 (Critical)
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-18 13:29 UTC
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/391524 | vdb-entry |
| https://vuldb.com/vuln/391524/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-75783 | third-party-advisory |
| https://vuldb.com/submit/877772 | third-party-advisory |
| https://github.com/meishigana/CVE/tree/main/team1… | related |
| https://github.com/meishigana/CVE/blob/main/team1… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| TRENDnet | TEW-WLC100P |
Affected:
12.07b01
cpe:2.3:o:trendnet:tew-wlc100p_firmware:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-75783",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-18T13:29:13.242116Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-18T13:29:24.061Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:o:trendnet:tew-wlc100p_firmware:*:*:*:*:*:*:*:*"
],
"modules": [
"DHCP blobmsg Handler"
],
"product": "TEW-WLC100P",
"vendor": "TRENDnet",
"versions": [
{
"status": "affected",
"version": "12.07b01"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "fuhanhan2014 (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in TRENDnet TEW-WLC100P 12.07b01. Affected by this vulnerability is an unknown functionality of the file /sbin/netifd of the component DHCP blobmsg Handler. The manipulation leads to stack-based buffer overflow. The attack must be carried out from within the local network. The exploit has been disclosed publicly and may be used."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 8.3,
"vectorString": "AV:A/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "Stack-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Memory Corruption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-18T12:45:10.923Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-391524 | TRENDnet TEW-WLC100P DHCP blobmsg netifd stack-based overflow",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/391524"
},
{
"name": "VDB-391524 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/391524/cti"
},
{
"name": "CVE-2026-75783 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-75783"
},
{
"name": "Submit #877772 | TRENDnet TEW-WLC100P TEW-WLC100P Stack-based Buffer Overflow",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/877772"
},
{
"tags": [
"related"
],
"url": "https://github.com/meishigana/CVE/tree/main/team15_20260702/01_wlc100p-netifd"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/meishigana/CVE/blob/main/team15_20260702/01_wlc100p-netifd/poc/poc-netifd-overflow.py"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-18T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-18T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-18T08:54:58.000Z",
"value": "VulDB entry last update"
}
],
"title": "TRENDnet TEW-WLC100P DHCP blobmsg netifd stack-based overflow",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-75783",
"datePublished": "2026-08-18T12:45:10.923Z",
"dateReserved": "2026-08-18T06:49:50.741Z",
"dateUpdated": "2026-08-18T13:29:24.061Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-75783 (GCVE-0-2026-75783)
Vulnerability from cvelistv5 – Published: 2026-08-18 12:45 – Updated: 2026-08-18 13:29
VLAI
EPSS
VEX
Title
TRENDnet TEW-WLC100P DHCP blobmsg netifd stack-based overflow
Summary
A security vulnerability has been detected in TRENDnet TEW-WLC100P 12.07b01. Affected by this vulnerability is an unknown functionality of the file /sbin/netifd of the component DHCP blobmsg Handler. The manipulation leads to stack-based buffer overflow. The attack must be carried out from within the local network. The exploit has been disclosed publicly and may be used.
Severity
9.6 (Critical)
9.6 (Critical)
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-18 13:29 UTC
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/391524 | vdb-entry |
| https://vuldb.com/vuln/391524/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-75783 | third-party-advisory |
| https://vuldb.com/submit/877772 | third-party-advisory |
| https://github.com/meishigana/CVE/tree/main/team1… | related |
| https://github.com/meishigana/CVE/blob/main/team1… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| TRENDnet | TEW-WLC100P |
Affected:
12.07b01
cpe:2.3:o:trendnet:tew-wlc100p_firmware:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-75783",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-18T13:29:13.242116Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-18T13:29:24.061Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:o:trendnet:tew-wlc100p_firmware:*:*:*:*:*:*:*:*"
],
"modules": [
"DHCP blobmsg Handler"
],
"product": "TEW-WLC100P",
"vendor": "TRENDnet",
"versions": [
{
"status": "affected",
"version": "12.07b01"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "fuhanhan2014 (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in TRENDnet TEW-WLC100P 12.07b01. Affected by this vulnerability is an unknown functionality of the file /sbin/netifd of the component DHCP blobmsg Handler. The manipulation leads to stack-based buffer overflow. The attack must be carried out from within the local network. The exploit has been disclosed publicly and may be used."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 8.3,
"vectorString": "AV:A/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "Stack-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Memory Corruption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-18T12:45:10.923Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-391524 | TRENDnet TEW-WLC100P DHCP blobmsg netifd stack-based overflow",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/391524"
},
{
"name": "VDB-391524 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/391524/cti"
},
{
"name": "CVE-2026-75783 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-75783"
},
{
"name": "Submit #877772 | TRENDnet TEW-WLC100P TEW-WLC100P Stack-based Buffer Overflow",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/877772"
},
{
"tags": [
"related"
],
"url": "https://github.com/meishigana/CVE/tree/main/team15_20260702/01_wlc100p-netifd"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/meishigana/CVE/blob/main/team15_20260702/01_wlc100p-netifd/poc/poc-netifd-overflow.py"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-08-18T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-08-18T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-08-18T08:54:58.000Z",
"value": "VulDB entry last update"
}
],
"title": "TRENDnet TEW-WLC100P DHCP blobmsg netifd stack-based overflow",
"x_generator": [
"VulDB PVTS v202608"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-75783",
"datePublished": "2026-08-18T12:45:10.923Z",
"dateReserved": "2026-08-18T06:49:50.741Z",
"dateUpdated": "2026-08-18T13:29:24.061Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}