CVE-2026-129352

CRITICALCVSS 9.11% EPSS๐Ÿงจ Public exploit (GreyNoise)

A vulnerability was detected in TRENDnet TEW-657BRM 1.00.1. This issue affects some unknown processing of the file /usr/sbin/upgrade_flash.cgi. Performing a manipulation of the argument boundary results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor explains: ""I am not able to confirm if such vulnerability exists as the product has been EOL for more than 15 years. We will send out an announcement letting customers know."

Published 2026-11-14 ยท last modified 2026-11-14

Full record at NVD โ†—

โ† Get alerted the moment a CVE hits your gear โ€” subscribe free

Ncerio by BeyondNets ยท data from NVD, CISA KEV, EPSS.