Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-75976: TRENDnet TEW-823DRU: Remote Password Exposure

CVE-2026-75976 · published 16 days ago

Summary

A security issue has been found in the TRENDnet TEW-823DRU router's password handling. This could allow an attacker to access the router's settings remotely. To stay secure, update the router's firmware as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
trendnet	tew-823dru	1.1.02b01

Original advisory text

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This manipulation of the argument wan_l2tp_password causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.

References

https://vuldb.com/vuln/391892 vdb-entry technical-description
https://vuldb.com/vuln/391892/cti signature permissions-required
https://vuldb.com/cve/CVE-2026-75976 third-party-advisory
https://vuldb.com/submit/877796 third-party-advisory
https://github.com/meishigana/CVE/tree/main/team15_20260702/10_823dru-rc-bof related
https://github.com/meishigana/CVE/blob/main/team15_20260702/10_823dru-rc-bof/poc... exploit

Severity

8.6 High

CVSS 3.1: 9.9 (MITRE)

Exploitation

EPSS <1%

Type

CWE-121Stack-based Buffer Overflow

CWE-119Buffer Overflow

Timeline

Published19 Aug 2026

Updated3 Sep 2026

First seen19 Aug 2026

Sources

CVE-2026-75976 · NVD

CVE-2026-75976 · MITRE

Monitor software like this

Free during beta