PT-2026-36595 · Trendnet · Tew-821Dap

Iot_Res · Published 2026-05-02 · Updated 2026-05-02 · CVE-2026-7608

Mitre

CVSS v3.1

5.5

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A vulnerability was detected in TRENDnet TEW-821DAP up to 1.12B01. The affected element is the function tools diagnostic. The manipulation results in os command injection. The exploit is now public and may be used. The vendor explains: "That firmware version will only work on our hardware version v1.xR. We have already EOL that product 8 years ago and are no longer selling". This vulnerability only affects products that are no longer supported by the maintainer.

Exploit

Fix

Command Injection

OS Command Injection

Weakness Enumeration

CWE-77

CWE-78

Related Identifiers

CVE-2026-7608

Affected Products

Tew-821Dap

References · 5

• 🔥 https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Trendnet/TEW-821DAP_CI1.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7608 · Security Note
• https://vuldb.com/vuln/360565 · Note
• https://vuldb.com/vuln/360565/cti · Note
• https://vuldb.com/submit/806215 · Note