PT-2026-25964 · Trendnet · Trendnet Tew-824Dru

Ic0Rner + 1 · Published 2026-03-17 · Updated 2026-03-19 · CVE-2026-4354

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-824DRU versions 1.010B01 through 1.04B01

Description A security issue exists in the TRENDnet TEW-824DRU web interface. Manipulation of the Language argument within the apply sec.cgi file and the sub 420A78 function can lead to cross-site scripting. This allows for remote attacks. The exploit is publicly available.

Recommendations TRENDnet TEW-824DRU version 1.010B01: At the moment, there is no information about a newer version that contains a fix for this vulnerability. TRENDnet TEW-824DRU version 1.04B01: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-4354

Affected Products

Trendnet Tew-824Dru

References · 9

• 🔥 https://github.com/i-Corner/cve/issues/41 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4354 · Security Note
• https://vuldb.com/?id.351381 · Note
• https://twitter.com/CVEnew/status/2034136452498440393 · Twitter Post
• https://vuldb.com/?submit.772660 · Note
• https://twitter.com/VulmonFeeds/status/2034178563327373734 · Twitter Post
• https://twitter.com/cyberbivash/status/2034088372780536001 · Twitter Post
• https://twitter.com/CVEarity/status/2034544810783387774 · Twitter Post
• https://vuldb.com/?ctiid.351381 · Note