CVE-2026-7607: A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function…
CVE-2026-7607 · Severity: high · CVSS 8.8 · Published 2026-05-02
A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function auto_update_firmware of the component Firmware Udpate. The manipulation of the argument str leads to buffer overflow. The attack may be initiated remotely. The vendor explains: "That firmware version will only work on our hardware version v1.xR. We have already EOL that product 8 years ago and are no longer selling". This vulnerability only affects products that are no longer supported by the maintainer.
No. Junglewise Threat Intelligence has no report of CVE-2026-7607 being exploited in the wild.
How severe is CVE-2026-7607?
High severity, with a CVSS score of 8.8, published 2 May 2026.
Which products and versions are affected?
TRENDnet TEW-821DAP, TRENDnet Tew-821dap Firmware. The advisory does not name versions.
Is there a fix for CVE-2026-7607?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
Am I affected by CVE-2026-7607?
Check whether you run TRENDnet TEW-821DAP or TRENDnet Tew-821dap Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.