Is CVE-2026-77946 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-77946 being exploited in the wild.

How severe is CVE-2026-77946?

Critical severity, with a CVSS score of 10, published 22 August 2026.

Which products and versions are affected?

TRENDnet TEW-821DAP 2.2.01b05 and earlier.

Is there a fix for CVE-2026-77946?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-77946 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-77946?

Check whether you run TRENDnet TEW-821DAP at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-77946: TRENDnet TEW-821DAP stack-based buffer overflow in NTP timezone configuration

CVE-2026-77946 · Severity: critical · CVSS 10 · Published 2026-08-22

TRENDnet TEW-821DAP is a wireless router used to provide internet connectivity and network management. A stack-based buffer overflow vulnerability in the NTP timezone configuration component allows a remote attacker to execute arbitrary code on the device by manipulating specific configuration parameters, potentially leading to complete device compromise or network takeover.

Technologies: TRENDnet TEW-821DAP. Vendors: TRENDnet.

Quick answers

Is CVE-2026-77946 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-77946 being exploited in the wild.
How severe is CVE-2026-77946?: Critical severity, with a CVSS score of 10, published 22 August 2026.
Which products and versions are affected?: TRENDnet TEW-821DAP 2.2.01b05 and earlier.
Is there a fix for CVE-2026-77946?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-77946 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-77946?: Check whether you run TRENDnet TEW-821DAP at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A stack-based buffer overflow vulnerability exists in the uci_safe_get function within the /cgi-bin/apply_time.cgi file, which handles NTP timezone configuration. The vulnerability is triggered by manipulating arguments such as system.ntp.server, system.ntp.enable_server, cameo.time.time_zone, or cameo.cameo.syslog_server. The attack is remotely exploitable without requiring authentication. An attacker can leverage this flaw to overflow the stack and achieve arbitrary code execution on the affected device. The vulnerability affects version 2.2.01b05 and earlier versions.

Affected products

TRENDnet TEW-821DAP 2.2.01b05 and earlier

Timeline

2026-08-22: disclosed
other: Publicly disclosed exploit available

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.