CVE-2026-109157

CRITICAL 9.9CVE-2026-109157 · Published 13/10/2026 · updated 14/10/2026

In short

CVE-2026-109157 is a CRITICAL (CVSS 9.9) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.59%, higher than 48.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor confirms: "As this router was EOL'd in 2011, we have no way of testing if such vulnerability exists. We will notify our customers of a potential vulnerability on this product." This vulnerability only affects products that are no longer supported by the maintainer.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free