CVE-2026-10061
Command Injection in TRENDnet TEW-432BRP
Publication date: 2026-05-29
Last updated on: 2026-05-29
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| trendnet | tew-432brp | to 2009 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-77 | The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component. |
| CWE-74 | The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2026-10061 is a command injection vulnerability found in the TRENDnet TEW-432BRP router, specifically in the formWPS function accessed via the /goform/formWPS endpoint.
An attacker can exploit this vulnerability by sending a specially crafted HTTP POST request with the peerPin parameter manipulated to include commands such as 'reboot'.
Due to insufficient input validation, the router executes these injected commands, allowing remote attackers to perform arbitrary command execution.
How can this vulnerability impact me? :
This vulnerability can lead to a denial-of-service condition by allowing an attacker to remotely execute commands like rebooting the router.
Such unauthorized command execution can disrupt network availability and potentially allow further exploitation depending on the commands executed.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by sending a crafted HTTP POST request to the /goform/formWPS endpoint with the peerPin parameter set to a command such as reboot. If the device executes the command, it is vulnerable.
A detection command example using curl would be:
- curl -X POST http://[router_ip]/goform/formWPS -d "peerPin=reboot"
If the router reboots or responds in a way indicating command execution, the vulnerability is present.
What immediate steps should I take to mitigate this vulnerability?
Since the affected product TRENDnet TEW-432BRP has been end-of-life for 15 years and no patches are available, immediate mitigation steps include:
- Isolate the vulnerable device from untrusted networks to prevent remote exploitation.
- Disable or restrict access to the /goform/formWPS endpoint if possible.
- Replace the device with a supported and updated router model to ensure security.