Is CVE-2026-15483 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-15483 being exploited in the wild.

How severe is CVE-2026-15483?

High severity, with a CVSS score of 8.8, published 12 July 2026.

Is there a fix for CVE-2026-15483?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-15483 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-15483?

Check whether you run TRENDnet TEW-821DAP at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-15483: TRENDnet TEW-821DAP buffer overflow in tools_nslookup

CVE-2026-15483 · Severity: high · CVSS 8.8 · Published 2026-07-12

A security vulnerability has been identified in the TRENDnet TEW-821DAP wireless access point. This device is used to provide Wi-Fi connectivity in business and home environments. An attacker could exploit this flaw to crash the device or potentially take full control of it, which could lead to unauthorized access to the network or interception of data. However, the manufacturer has stated that this product is at its End of Life (EOL) and will not receive a security patch.

Technologies: TRENDnet TEW-821DAP. Vendors: TRENDnet.

Quick answers

Is CVE-2026-15483 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-15483 being exploited in the wild.
How severe is CVE-2026-15483?: High severity, with a CVSS score of 8.8, published 12 July 2026.
Which products and versions are affected?: TRENDnet TEW-821DAP 1.12B01.
Is there a fix for CVE-2026-15483?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-15483 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-15483?: Check whether you run TRENDnet TEW-821DAP at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A stack-based buffer overflow exists in the 'ssi' component of TRENDnet TEW-821DAP firmware version 1.12B01. The vulnerability is located in function sub_41EC14 within the /goform/tools_nslookup handler. The root cause is an unsafe strcpy operation where the 'nslookup_target' environment variable (derived from user-supplied HTTP POST input) is copied into a fixed-size stack buffer without adequate bounds checking. An attacker providing an input greater than 392 bytes can overwrite the return address on the stack. This attack requires network reachability and low-privileged authentication. No patch is available as the vendor has designated the product as End of Life (EOL).

Affected products

TRENDnet TEW-821DAP 1.12B01

Timeline

2026-07-12: advisory: NVD publication date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.