Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-10123: TRENDnet TEW-432BRP: Remote attack possible through router settings

CVE-2026-10123 · published 5 months ago

Summary

A security risk was found in a very old version of the TRENDnet TEW-432BRP router software. This means that a remote attacker could potentially access and manipulate the router's settings. Since this router model is no longer supported by the manufacturer, it's unlikely to be fixed, but it's still a good idea to consider replacing it for security reasons.

Original advisory text

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. This impacts the function formSetDomainFilter of the file /goform/formSetDomainFilter. Performing a manipulation of the argument blocked_domain/permitted_domain/blocked_domain_list/permitted_domain_list results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor explains: "This product has been EOL for 15 years (since 2009). As the item has been EOL for such a long time, we are not able to replicate or fix any vulnerabilities." This vulnerability only affects products that are no longer supported by the maintainer.

References

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

7.4 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-119Buffer Overflow

CWE-121Stack-based Buffer Overflow

Timeline

Published30 May 2026

Updated4 Nov 2026

First seen30 May 2026

Sources

CVE-2026-10123 · NVD

Track software like this

Free during beta