CVE-2026-7609

MEDIUM 6.3

TRENDnet TEW-821DAP Firmware Udpate diagnostic tools_diagnostic os command injection

CVSS Score

6.3

EPSS Score

0.0%

EPSS Percentile

0th

A flaw has been found in TRENDnet TEW-821DAP up to 1.12B01. The impacted element is the function tools_diagnostic of the file /tmp/diagnostic of the component Firmware Udpate. This manipulation causes os command injection. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor explains: "That firmware version will only work on our hardware version v1.xR. We have already EOL that product 8 years ago and are no longer selling". This vulnerability only affects products that are no longer supported by the maintainer.

CWE	CWE-78 CWE-77
Vendor	trendnet
Product	tew-821dap
Published	May 2, 2026

Stay Ahead of the Next One

Get instant alerts for trendnet tew-821dap

Be the first to know when new medium vulnerabilities affecting trendnet tew-821dap are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

TRENDnet / TEW-821DAP

1.12B01

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/360566 vuldb.com: https://vuldb.com/vuln/360566/cti vuldb.com: https://vuldb.com/submit/806216 github.com: https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Trendnet/TEW-821DAP_CI2.md

Credits

🔍 IOT_Res (VulDB User) VulDB CNA Team