PT-2026-36602 · Trendnet · Tew-821Dap

Iot_Res · Published 2026-05-02 · Updated 2026-05-02 · CVE-2026-7610

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-821DAP version 1.12B01

Description An issue exists in the Firmware Update component within the '/www/cgi/ssi' file. This flaw allows for the remote cleartext transmission of sensitive information. The attack is characterized by high complexity and is difficult to execute.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

CWE-310

Related Identifiers

CVE-2026-7610

Affected Products

Tew-821Dap

References · 8

• https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Trendnet/TEW-821DAP_Down.md · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-7610 · Security Note
• https://twitter.com/CVEnew/status/2050523100882579516 · Twitter Post
• https://twitter.com/infoflowcloud/status/2050524575830594008 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2050543143632642222 · Twitter Post
• https://vuldb.com/vuln/360567/cti · Note
• https://vuldb.com/vuln/360567 · Note
• https://vuldb.com/submit/806217 · Note