CVE-2026-7607

A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function auto_update_firmware of the component Firmware Udpate. The manipulation of the argument str leads to buffer overflow. The attack may be initiated remotely. The vendor explains: "That firmware version will only work on our hardware version v1.xR. We have already EOL that product 8 years ago and are no longer selling". This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-119
• CWE-120

• https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Trendnet/TEW-821DAP_BO.mdExploit, Third Party Advisory
• https://vuldb.com/submit/806214Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/360564Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/360564/ctiPermissions Required, VDB Entry

Published

May 2, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-76057The AutomatorWP – Automator plugin for no-code automations, …4.3
• CVE-2026-76059IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could …8.8
• CVE-2026-7606A weakness has been identified in TRENDnet TEW-821DAP 1.12B0…8.1
• CVE-2026-76060An authenticated OS command injection vulnerability exists i…8.8
• CVE-2026-76063The FundEngine – Donation and Crowdfunding Platform plugin f…6.4
• CVE-2026-76069Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-76070Netis NC63 firmware through V3.0.0.3327 contains a stack-bas…9.8
• CVE-2026-76071Netis NC63 firmware through V3.0.0.3327 contains a stack-bas…9.8
• CVE-2026-76072The Continue CLI applies an incomplete denylist as its only …7.4
• CVE-2026-76073Label Studio does not scope the annotation detail endpoint t…8.8
• CVE-2026-76074The AutomatorWP – Automator plugin for no-code automations, …4.3
• CVE-2026-7608A vulnerability was detected in TRENDnet TEW-821DAP up to 1.…8