critical9.9
CVE-2026-76590
A vulnerability was identified in TRENDnet TEW-755AP up to 20260702.
Impact
A vulnerability was identified in TRENDnet TEW-755AP up to 20260702. Affected by this issue is some unknown functionality of the file /cgi-bin/wan.cgi of the component ssi. Such manipulation of the argument cameo.wan.wan_pppoe_password_00 leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/meishigana/CVE/blob/main/team15_20260702/15_755ap-ssi-bof/poc/poc-ssi-overflow.py
- https://github.com/meishigana/CVE/tree/main/team15_20260702/15_755ap-ssi-bof
- https://vuldb.com/cve/CVE-2026-76590
- https://vuldb.com/submit/877850
- https://vuldb.com/vuln/393087
- https://vuldb.com/vuln/393087/cti