CVE-2025-8759

A vulnerability was found in TRENDnet TN-200 1.02b02. It has been declared as problematic. This vulnerability affects unknown code of the component Lighttpd. The manipulation of the argument secdownload.secret with the input neV3rUseMe leads to use of hard-coded cryptographic key . The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-320
• CWE-321

• https://vuldb.com/?ctiid.319264Permissions Required, VDB Entry
• https://vuldb.com/?id.319264Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.624555Third Party Advisory, VDB Entry
• https://www.notion.so/23f54a1113e7801e944ec65a2f7c5448Third Party Advisory

Published

Aug 9, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-8753A vulnerability, which was classified as critical, has been …5.4
• CVE-2025-8754Missing Authentication for Critical Function vulnerability i…8.7
• CVE-2025-8755A vulnerability was found in macrozheng mall up to 1.0.3 and…5.5
• CVE-2025-8756A vulnerability has been found in TDuckCloud tduck-platform …8.8
• CVE-2025-8757A vulnerability was found in TRENDnet TV-IP110WN 1.2.2 and c…7
• CVE-2025-8758A vulnerability was found in TRENDnet TEW-822DRE FW103B02. I…7
• CVE-2025-8760A vulnerability was identified in INSTAR 2K+ and 4K 3.11.1 B…9.8
• CVE-2025-8761A vulnerability has been found in INSTAR 2K+ and 4K 3.11.1 B…7.7
• CVE-2025-8762A vulnerability was found in INSTAR 2K+ and 4K 3.11.1 Build …6.8
• CVE-2025-8763A vulnerability was found in Ruijie EG306MG 3.0(1)B11P309. I…6.3
• CVE-2025-8764A vulnerability classified as critical has been found in lin…5.4
• CVE-2025-8765A vulnerability classified as problematic was found in Datac…3.5