CVE-2026-77988mediumCWE-74CWE-77

CVE-2026-77988: medium-severity vulnerability in TRENDnet TEW-823DRU

TRENDnet TEW-823DRU CLI Configuration Tool nvram_get command injection

Published · Updated

Follow this CVE+ Monitor TEW-823DRU

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 5.1epss 2.4%
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvram_get of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P
Affected products
TRENDnet · TEW-823DRU
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — TRENDnet TEW-823DRU

In the same product, most dangerous first.

CVE-2026-75984MEDIUMTRENDnet TEW-823DRU admin.cgi command injectionEPSS 1.8%CVE-2026-75976CRITICALTRENDnet TEW-823DRU NVRAM wan.cgi strcpy stack-based overflowEPSS 0.9%