# TRENDnet vulnerabilities Source: https://junglewise.ai/threats/vendors/trendnet Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/trendnet.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 59 vulnerabilities in TRENDnet: 0 in the last 7 days and 9 in the last 90 days, 9 of them critical and 1 exploited in the wild. The most recent, CVE-2026-109157, was published on 13 October 2026. 2 vulnerabilities in the last four weeks, up from none in the four before. 2 critical against 0. 7 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 9 - All time: 59 (9 critical, 1 exploited in the wild) ## About TRENDnet TRENDnet is a manufacturer of networking hardware products including routers, switches, and IP cameras. ## Latest TRENDnet vulnerabilities - [CVE-2026-109157: TRENDnet TEW-432BRP stack buffer overflow in formTcpipSetup](https://junglewise.ai/threats/cve-2026-109157-a-vulnerability-was-found-in-trendnet-tew-432brp-3-10b20) (critical, CVSS 9.9, published 13 Oct 2026) - [CVE-2026-108804: TRENDnet TEW-751DR/TEW-752DRU/TEW-733GR OS command injection in web management](https://junglewise.ai/threats/cve-2026-108804-a-vulnerability-was-detected-in-trendnet-tew-751dr-tew-752dru) (critical, CVSS 10, published 12 Oct 2026) - [CVE-2026-77988: TRENDnet TEW-823DRU command injection in CLI configuration](https://junglewise.ai/threats/cve-2026-77988-trendnet-tew-823dru-command-injection-in-cli-configuration) (medium, CVSS 6.6, published 22 Aug 2026) - [CVE-2026-77946: TRENDnet TEW-821DAP stack-based buffer overflow in NTP timezone configuration](https://junglewise.ai/threats/cve-2026-77946-trendnet-tew-821dap-stack-based-buffer-overflow-in-ntp-timezone) (critical, CVSS 10, published 22 Aug 2026) - [CVE-2026-77945: TRENDnet TEW-821DAP command injection in upload.cgi](https://junglewise.ai/threats/cve-2026-77945-trendnet-tew-821dap-command-injection-in-upload-cgi) (high, CVSS 7.4, published 22 Aug 2026) - [CVE-2026-76591: TRENDnet TEW-755AP command injection in SSI email function](https://junglewise.ai/threats/cve-2026-76591-trendnet-tew-755ap-command-injection-in-ssi-email-function) (high, CVSS 7.4, published 19 Aug 2026) - [CVE-2026-76590: TRENDnet TEW-755AP stack buffer overflow in WAN configuration](https://junglewise.ai/threats/cve-2026-76590-trendnet-tew-755ap-stack-buffer-overflow-in-wan-configuration) (critical, CVSS 9.9, published 19 Aug 2026) - [CVE-2026-76589: TRENDnet TEW-755AP stack buffer overflow in mycli](https://junglewise.ai/threats/cve-2026-76589-trendnet-tew-755ap-stack-buffer-overflow-in-mycli) (critical, CVSS 9.9, published 19 Aug 2026) - [CVE-2026-75783: TRENDnet TEW-WLC100P stack buffer overflow in DHCP handler](https://junglewise.ai/threats/cve-2026-75783-trendnet-tew-wlc100p-stack-buffer-overflow-in-dhcp-handler) (critical, CVSS 9.6, published 18 Aug 2026) - [CVE-2026-15487: TRENDnet TEW-821DAP OS command injection in system_ntp](https://junglewise.ai/threats/cve-2026-15487-trendnet-tew-821dap-os-command-injection-in-system-ntp) (medium, CVSS 6.3, published 12 Jul 2026) - [CVE-2026-15486: TRENDnet TEW-821DAP OS command injection in tools_ddns](https://junglewise.ai/threats/cve-2026-15486-trendnet-tew-821dap-os-command-injection-in-tools-ddns) (medium, CVSS 6.3, published 12 Jul 2026) - [CVE-2026-15485: TRENDnet TEW-821DAP command injection in DNS Lookup Handler](https://junglewise.ai/threats/cve-2026-15485-trendnet-tew-821dap-command-injection-in-dns-lookup-handler) (medium, CVSS 6.3, published 12 Jul 2026) - [CVE-2026-15484: TRENDnet TEW-821DAP buffer overflow in tools_nslookup](https://junglewise.ai/threats/cve-2026-15484-trendnet-tew-821dap-buffer-overflow-in-tools-nslookup) (high, CVSS 8.8, published 12 Jul 2026) - [CVE-2026-15483: TRENDnet TEW-821DAP buffer overflow in tools_nslookup](https://junglewise.ai/threats/cve-2026-15483-trendnet-tew-821dap-buffer-overflow-in-tools-nslookup) (high, CVSS 8.8, published 12 Jul 2026) - [CVE-2026-15481: Trendnet TEW-635BRM command injection in IPoA WAN Setup](https://junglewise.ai/threats/cve-2026-15481-trendnet-tew-635brm-command-injection-in-ipoa-wan-setup) (high, CVSS 8.8, published 12 Jul 2026) - [CVE-2026-15480: Trendnet TEW-635BRM stack overflow in start_httpd](https://junglewise.ai/threats/cve-2026-15480-trendnet-tew-635brm-stack-overflow-in-start-httpd) (high, CVSS 8.8, published 12 Jul 2026) - [CVE-2026-10183: TRENDnet TEW-432BRP stack overflow in formWlanSetup](https://junglewise.ai/threats/cve-2026-10183-trendnet-tew-432brp-stack-overflow-in-formwlansetup) (high, CVSS 8.8, published 31 May 2026) - [CVE-2026-10182: TRENDnet TEW-432BRP command injection in formWlanSetup](https://junglewise.ai/threats/cve-2026-10182-trendnet-tew-432brp-command-injection-in-formwlansetup) (medium, CVSS 6.3, published 31 May 2026) - [CVE-2026-10181: TRENDnet TEW-432BRP stack overflow in formSysCmd](https://junglewise.ai/threats/cve-2026-10181-trendnet-tew-432brp-stack-overflow-in-formsyscmd) (high, CVSS 8.8, published 31 May 2026) - [CVE-2026-10180: TRENDnet TEW-432BRP command injection in formSysCmd](https://junglewise.ai/threats/cve-2026-10180-trendnet-tew-432brp-command-injection-in-formsyscmd) (medium, CVSS 6.3, published 31 May 2026) - [CVE-2026-10179: TRENDnet TEW-432BRP stack overflow in formSetWlanEncrypt](https://junglewise.ai/threats/cve-2026-10179-trendnet-tew-432brp-stack-overflow-in-formsetwlanencrypt) (high, CVSS 8.8, published 31 May 2026) - [CVE-2026-10162: TRENDnet TEW-432BRP stack overflow in formSetPassword](https://junglewise.ai/threats/cve-2026-10162-trendnet-tew-432brp-stack-overflow-in-formsetpassword) (high, CVSS 8.8, published 31 May 2026) - [CVE-2026-10161: TRENDnet TEW-432BRP stack overflow in formResetStatistic](https://junglewise.ai/threats/cve-2026-10161-trendnet-tew-432brp-stack-overflow-in-formresetstatistic) (high, CVSS 8.8, published 31 May 2026) - [CVE-2026-10160: TRENDnet TEW-432BRP stack overflow in formSetEnableWizard](https://junglewise.ai/threats/cve-2026-10160-trendnet-tew-432brp-stack-overflow-in-formsetenablewizard) (high, CVSS 8.8, published 31 May 2026) - [CVE-2026-10159: TRENDnet TEW-432BRP stack overflow in formSysLog](https://junglewise.ai/threats/cve-2026-10159-trendnet-tew-432brp-stack-overflow-in-formsyslog) (high, CVSS 8.8, published 31 May 2026) ## Most severe TRENDnet vulnerabilities - [CVE-2015-1187: D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability](https://junglewise.ai/threats/cve-2015-1187-d-link-and-trendnet-multiple-devices-remote-code-execution) (critical, exploited in the wild, CVSS 9.8, published 25 Mar 2022) - [CVE-2026-108804: TRENDnet TEW-751DR/TEW-752DRU/TEW-733GR OS command injection in web management](https://junglewise.ai/threats/cve-2026-108804-a-vulnerability-was-detected-in-trendnet-tew-751dr-tew-752dru) (critical, CVSS 10, published 12 Oct 2026) - [CVE-2026-77946: TRENDnet TEW-821DAP stack-based buffer overflow in NTP timezone configuration](https://junglewise.ai/threats/cve-2026-77946-trendnet-tew-821dap-stack-based-buffer-overflow-in-ntp-timezone) (critical, CVSS 10, published 22 Aug 2026) - [CVE-2026-76590: TRENDnet TEW-755AP stack buffer overflow in WAN configuration](https://junglewise.ai/threats/cve-2026-76590-trendnet-tew-755ap-stack-buffer-overflow-in-wan-configuration) (critical, CVSS 9.9, published 19 Aug 2026) - [CVE-2026-76589: TRENDnet TEW-755AP stack buffer overflow in mycli](https://junglewise.ai/threats/cve-2026-76589-trendnet-tew-755ap-stack-buffer-overflow-in-mycli) (critical, CVSS 9.9, published 19 Aug 2026) - [CVE-2026-109157: TRENDnet TEW-432BRP stack buffer overflow in formTcpipSetup](https://junglewise.ai/threats/cve-2026-109157-a-vulnerability-was-found-in-trendnet-tew-432brp-3-10b20) (critical, CVSS 9.9, published 13 Oct 2026) - [CVE-2025-15471: A vulnerability was detected in TRENDnet TEW-713RE 1.02. The impacted element is an unknown function of the file…](https://junglewise.ai/threats/cve-2025-15471-a-vulnerability-was-detected-in-trendnet-tew-713re-1-02-the) (critical, CVSS 9.8, published 7 Jan 2026) - [CVE-2024-46484: TRENDnet TV-IP410 OS command injection in testserv.cgi](https://junglewise.ai/threats/cve-2024-46484-trendnet-tv-ip410-os-command-injection-in-testserv-cgi) (critical, CVSS 9.8, published 29 Aug 2025) - [CVE-2026-75783: TRENDnet TEW-WLC100P stack buffer overflow in DHCP handler](https://junglewise.ai/threats/cve-2026-75783-trendnet-tew-wlc100p-stack-buffer-overflow-in-dhcp-handler) (critical, CVSS 9.6, published 18 Aug 2026) - [CVE-2025-15137: A vulnerability was detected in TRENDnet TEW-800MB 1.0.1.0. Affected by this vulnerability is the function sub_F934 of…](https://junglewise.ai/threats/cve-2025-15137-a-vulnerability-was-detected-in-trendnet-tew-800mb-1-0-1-0) (high, CVSS 8.8, published 28 Dec 2025) ## Vulnerabilities per week 2 vulnerabilities in the last four weeks, up from none in the four before. 2 critical against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 7 | 4 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 2 | 2 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## TRENDnet technologies - [TRENDnet TEW-432BRP](https://junglewise.ai/threats/technologies/tew-432brp): 21 vulnerabilities - [TRENDnet TEW-821DAP](https://junglewise.ai/threats/technologies/tew-821dap): 13 vulnerabilities - [TRENDnet TEW-657BRM](https://junglewise.ai/threats/technologies/tew-657brm): 8 vulnerabilities - [TRENDnet Tew-657brm Firmware](https://junglewise.ai/threats/technologies/tew-657brm-firmware): 8 vulnerabilities - [TRENDnet Tew-821dap Firmware](https://junglewise.ai/threats/technologies/tew-821dap-firmware): 6 vulnerabilities - [TRENDnet TEW-755AP](https://junglewise.ai/threats/technologies/tew-755ap): 3 vulnerabilities - [TRENDnet TEW-WLC100P](https://junglewise.ai/threats/technologies/tew-wlc100p): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "TRENDnet vulnerabilities", https://junglewise.ai/threats/vendors/trendnet, 13 November 2026.