CVE-2026-76589
Received Received - Intake

Stack-Based Buffer Overflow in TRENDnet TEW-755AP

Vulnerability report for CVE-2026-76589, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-19

Last updated on: 2026-08-19

Assigner: VulDB

Description

A vulnerability was found in TRENDnet TEW-755AP up to 20260702. Affected is the function FUN_401000 of the file /sbin/mycli. The manipulation of the argument ssid results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-19
Last Modified
2026-08-19
Generated
2026-08-20
AI Q&A
2026-08-20
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
trendnet tew-755ap to 20260702 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a stack-based buffer overflow in TRENDnet TEW-755AP devices up to firmware version 20260702. It occurs in the function FUN_401000 of the file /sbin/mycli when the ssid argument is manipulated. This allows an attacker to overflow the stack, potentially executing arbitrary code remotely.

Impact Analysis

An attacker could exploit this to gain control of the affected device, leading to unauthorized access, data theft, or disruption of network services. Since the exploit is public, the risk of attack is higher. Users should update firmware immediately to mitigate this risk.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating GDPR and HIPAA requirements for data protection and access control. Organizations using affected devices may face compliance violations, legal penalties, and reputational damage if exploited.

Mitigation Strategies

Immediately update the TRENDnet TEW-755AP firmware to the latest version to address the stack-based buffer overflow in the FUN_401000 function. Disable remote access to the device if not required and restrict network access to trusted sources only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76589. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart