CVE-2026-109157

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor confirms: "As this router was EOL'd in 2011, we have no way of testing if such vulnerability exists. We will notify our customers of a potential vulnerability on this product." This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-119
• CWE-121

• https://github.com/wudipjq/my_vuln/blob/main/TRENDnet/vuln_21/21.md
• https://vuldb.com/cve/CVE-2026-109157
• https://vuldb.com/submit/979590
• https://vuldb.com/vuln/416890
• https://vuldb.com/vuln/416890/cti

Published

Oct 13, 2026

Last Modified

Oct 13, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-109149A weakness has been identified in beautifier js-beautify up …5.3
• CVE-2026-10915Use after free in Core in Google Chrome on iOS prior to 149.…8.3
• CVE-2026-109152A security vulnerability has been detected in jbardin scp.py…5.4
• CVE-2026-109153A vulnerability was detected in MosaicML Composer up to 0.32…6.3
• CVE-2026-109155A flaw has been found in DeepPavlov up to 1.7.0. This impact…6.3
• CVE-2026-109156A vulnerability has been found in SeldonIO MLServer up to 1.…6.3
• CVE-2026-10916Insufficient validation of untrusted input in DevTools in Go…6.1
• CVE-2026-109160A vulnerability was determined in PublicCMS up to 5.202608.a…4.3
• CVE-2026-109162Forms using FileUpload or ImageUpload elements with a custom…6.3
• CVE-2026-109164TDuck survey form through 6.0 contains an insecure direct ob…7.1
• CVE-2026-109165TDuck survey form through 6.0 contains a broken access contr…4.3
• CVE-2026-109166lamp-cloud through 5.10.1 contains an insecure direct object…6.5