CVE-2026-19830
Received Received - Intake

Resource Exhaustion in TRENDnet TEW-816DRM via bftpd

Publication date: 2026-08-14

Last updated on: 2026-08-14

Assigner: VulDB

Description
A vulnerability was found in TRENDnet TEW-816DRM GURNC4.OT182B-C-TN-R1B028-US.EN. This impacts an unknown function of the file /etc/bftpd.conf of the component bftpd. The manipulation of the argument USERLIMIT_GLOBAL results in allocation of resources. It is possible to launch the attack remotely. This vulnerability only affects products that are no longer supported by the maintainer.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-14
Last Modified
2026-08-14
Generated
2026-08-14
AI Q&A
2026-08-14
EPSS Evaluated
N/A
NVD
CVE-2026-19830
EUVD
EUVD-2026-58663

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
trendnet tew-816drm *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-400 The product does not properly control the allocation and maintenance of a limited resource.
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the TRENDnet TEW-816DRM router's bftpd component. It involves an unknown function in the file /etc/bftpd.conf where manipulating the USERLIMIT_GLOBAL argument can cause resource allocation issues. The attack can be launched remotely and only affects unsupported products.

Impact Analysis

The vulnerability may lead to resource exhaustion on the affected device due to improper handling of the USERLIMIT_GLOBAL parameter. This could cause the router to become unresponsive or crash, disrupting network services.

Mitigation Strategies

Since the affected product TRENDnet TEW-816DRM is no longer supported by the maintainer, the best mitigation is to replace the device with a supported alternative. If replacement is not immediately possible, isolate the device from untrusted networks to limit exposure.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19830. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart