CVE-2025-15471

A vulnerability was detected in TRENDnet TEW-713RE 1.02. The impacted element is an unknown function of the file /goformX/formFSrvX. The manipulation of the argument SZCMD results in os command injection. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor confirms: "The product in question TEW-731RE for CVE-2025-15471 has been discontinued and end of life since October 23, 2020. We no longer provide support for this product, so we are not able to confirm the vulnerabilities. We will make an announcement on the website product support page and notify customers who registered their products with us." This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-77
• CWE-78

• https://pentagonal-time-3a7.notion.site/Command-Injection-Vulnerability-in-formFSrvX-of-Trendnet-TEW-713RE-2d1e5dd4c5a5801481abe7a944763d39Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.339721Permissions Required, VDB Entry
• https://vuldb.com/?id.339721Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.721441Third Party Advisory, VDB Entry

Published

Jan 7, 2026

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-15466The Image Photo Gallery Final Tiles Grid plugin for WordPres…5.4
• CVE-2025-15467Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedDat…8.8
• CVE-2025-15468Issue summary: If an application using the SSL_CIPHER_find()…5.9
• CVE-2025-15469Issue summary: The 'openssl dgst' command-line tool silently…5.5
• CVE-2025-1547A stack-based buffer overflow vulnerability [CWE-121] in Wat…7.2
• CVE-2025-15470The Eleganzo theme for WordPress is vulnerable to arbitrary …6.5
• CVE-2025-15472A flaw has been found in TRENDnet TEW-811DRU 1.0.2.0. This a…7.3
• CVE-2025-15473The Timetics WordPress plugin before 1.0.52 does not have a…4.3
• CVE-2025-15474AuntyFey Smart Combination Lock firmware versions as of 2025…5.3
• CVE-2025-15475The PayHere Payment Gateway Plugin for WooCommerce plugin fo…5.3
• CVE-2025-15476The The Bucketlister plugin for WordPress is vulnerable to u…4.3
• CVE-2025-15477The Bucketlister plugin for WordPress is vulnerable to SQL I…6.5