PT-2026-78836 · Trendnet · Tew755Ap

Fuhanhan2015

·

CVE-2026-76591

·

Published

2026-08-19

·

Updated

2026-08-21

CVSS v3.1

7.4

High

VectorAV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions TRENDnet TEW-755AP versions prior to 20260702
Description A command injection flaw exists in the ssi component within the /cgi-bin/email.cgi endpoint. The issue resides in the log email server() function, allowing a remote attacker to execute arbitrary commands through manipulation.
Recommendations Update TRENDnet TEW-755AP to a version released after 20260702. As a temporary mitigation, restrict access to the /cgi-bin/email.cgi endpoint.

Exploit

Fix

Command Injection

Special Elements Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-77CWE-74

Related Identifiers

CVE-2026-76591

Affected Products

Tew755Ap