PT-2026-36585 · Trendnet · Tew-821Dap

Iot_Res · Published 2026-05-02 · Updated 2026-05-02 · CVE-2026-7606

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-821DAP version 1.12B01

Description A weakness in the Firmware Update Handler component affects the find hwid/new gui update firmware() function. Remote manipulation of the dest argument can lead to insufficient verification of data authenticity. This issue is highly complex to exploit and affects products that are no longer supported by the maintainer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2026-7606

Affected Products

Tew-821Dap

References · 10

• 🔥 https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Trendnet/TEW-821DAP_Auth.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7606 · Security Note
• https://vuldb.com/vuln/360563/cti · Note
• https://vuldb.com/submit/806213 · Note
• https://t.me/cveNotify/161854 · Telegram Post
• https://twitter.com/infoflowcloud/status/2050489446953374154 · Twitter Post
• https://t.me/CVEtracker/52507 · Telegram Post
• https://vuldb.com/vuln/360563 · Note
• https://twitter.com/VulmonFeeds/status/2050514984648491217 · Twitter Post
• https://twitter.com/CVEnew/status/2050488242269745319 · Twitter Post