CVE-2026-7608
MEDIUMTRENDnet TEW-821DAP tools_diagnostic os command injection
Title source: cnaDescription
A vulnerability was detected in TRENDnet TEW-821DAP up to 1.12B01. The affected element is the function tools_diagnostic. The manipulation results in os command injection. The exploit is now public and may be used. The vendor explains: "That firmware version will only work on our hardware version v1.xR. We have already EOL that product 8 years ago and are no longer selling". This vulnerability only affects products that are no longer supported by the maintainer.
References (4)
Core 4
Core References
Vdb Entry, Technical Description vdb-entry
technical-description
VDB-360565 | TRENDnet TEW-821DAP tools_diagnostic os command injection
https://vuldb.com/vuln/360565
Signature, Permissions Required signature
permissions-required
VDB-360565 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/360565/cti
Third Party Advisory third-party-advisory
Submit #806215 | Trendnet TEW-821DAP v1.12B01 CWE-78 Improper Neutralization of Special Elements used in an OS
https://vuldb.com/submit/806215
Scores
CVSS v3
5.5
EPSS
0.0088
EPSS Percentile
75.5%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-77
CWE-78
Status
published
Products (2)
TRENDnet/TEW-821DAP
1.12B01
trendnet/tew-821dap_firmware
1.12b01
Published
May 02, 2026
Tracked Since
May 02, 2026