CVE-2026-15485

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-821DAP version 1.11B03

Description An OS command injection flaw exists in the DNS Lookup Handler component. The issue occurs within the sub 43F2C4() function located in the /goform/tools nslookup file. A remote attacker can trigger this by manipulating the nslookup target/dns server argument. This product has reached end-of-life (EOL) and is no longer supported by the maintainer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.