PT-2026-45162 · Trendnet · Tew-432Brp

Pjq_Buoy · CVE-2026-10158 · Published 2026-04-28 · Updated 2026-05-31

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-432BRP version 3.10B20

Description A stack-based buffer overflow exists in the formPortFw() function within the /goform/formPortFw file. This issue is triggered by the manipulation of the server name argument, allowing a remote attacker to send excessively long or malformed strings. This can lead to arbitrary code execution or a denial of service. The attack can be launched remotely without authentication.

Recommendations For version 3.10B20, replace the device or isolate it from untrusted networks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

BDU:2026-07558

CVE-2026-10158

Affected Products

Tew-432Brp

References · 10

• 🔥 https://github.com/wudipjq/my_vuln/blob/main/TRENDnet/vuln_11/11.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-10158 · Security Note
• https://bdu.fstec.ru/vul/2026-07558 · Security Note
• https://vuldb.com/submit/814768 · Note
• https://t.me/CVEtracker/55365 · Telegram Post
• https://t.me/cveNotify/165345 · Telegram Post
• https://twitter.com/CVEnew/status/2061216673256931798 · Twitter Post
• https://vuldb.com/vuln/367411/cti · Note
• https://reddit.com/r/pwnhub/comments/1tsw3d9/trendnet_router_vulnerability_exposes_users_to · Reddit Post
• https://vuldb.com/vuln/367411 · Note