TRENDnet has 11 CVEs on record between 2021 and 2026. 2 were published in the last 90 days. The busiest recent month was December 2025 with 3. The median CVSS is 8.8 (high), with 5 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-77 (6) and CWE-78 (4). Most affected products: tew-800mb_firmware (2), TEW-432BRP (1), TEW-751DR (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.8
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
Products
- tew-800mb_firmware 2
- TEW-432BRP 1
- TEW-751DR 1
- tew-713re_firmware 1
- tew-811dru_firmware 1
- tew-822dre_firmware 1
Worst active — by depth score
CVE-2026-109157Critical· 9.9A vulnerability was found in TRENDnet TEW-432BRP 3.10B2067CVE-2026-108804Critical· 10.0A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B0367CVE-2025-15471Critical· 9.8A vulnerability was detected in TRENDnet TEW-713RE 1.0257CVE-2024-46484Critical· 9.8TRENDnet TV-IP410 vA1.0R was discovered to contain an OS command injection vulnerability via the /server/cgi-bin/testserv.cgi component.54CVE-2022-37053Critical· 9.8TRENDnet TEW733GR v1.03B01 is vulnerable to Command injection via /htdocs/upnpinc/gena.php.54
trendnet vulnerabilities
CVEs affecting trendnet, newest first. Open any entry for full detail, references, and exploit status.
11 CVEsRSS
CVE-2026-109157Critical· 9.9PoCA vulnerability was found in TRENDnet TEW-432BRP 3.10B20
A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer over…
CVE-2026-108804Critical· 10.0PoCA vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03
A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03. Affected is the function fwrite of the file pigwidgeon.cgi of the component Web Management Backend. The manipulation of the argument service res…
CVE-2025-15472High· 7.2A flaw has been found in TRENDnet TEW-811DRU 1.0.2.0
A flaw has been found in TRENDnet TEW-811DRU 1.0.2.0. This affects the function setDeviceURL of the file uapply.cgi of the component httpd . This manipulation of the argument DeviceURL causes os command injection. The attack can be init…
CVE-2025-15471Critical· 9.8A vulnerability was detected in TRENDnet TEW-713RE 1.02
A vulnerability was detected in TRENDnet TEW-713RE 1.02. The impacted element is an unknown function of the file /goformX/formFSrvX. The manipulation of the argument SZCMD results in os command injection. It is possible to launch the att…
CVE-2025-15139Medium· 6.3A vulnerability has been found in TRENDnet TEW-822DRE 1.00B21/1.01B06
A vulnerability has been found in TRENDnet TEW-822DRE 1.00B21/1.01B06. This affects the function sub_43ACF4 of the file /boafrm/formWsc. Such manipulation of the argument peerPin leads to command injection. The attack can be executed re…
CVE-2025-15137High· 8.8A vulnerability was detected in TRENDnet TEW-800MB 1.0.1.0
A vulnerability was detected in TRENDnet TEW-800MB 1.0.1.0. Affected by this vulnerability is the function sub_F934 of the file NTPSyncWithHost.cgi. The manipulation results in command injection. The attack may be launched remotely. The…
CVE-2025-15136High· 8.8A security vulnerability has been detected in TRENDnet TEW-800MB 1.0.1.0
A security vulnerability has been detected in TRENDnet TEW-800MB 1.0.1.0. Affected is the function do_setWizard_asp of the file /goform/wizardset of the component Management Interface. The manipulation of the argument WizardConfigured le…
CVE-2024-46484Critical· 9.8TRENDnet TV-IP410 vA1.0R was discovered to contain an OS command injection vulnerability via the /server/cgi-bin/testserv.cgi component.
TRENDnet TV-IP410 vA1.0R was discovered to contain an OS command injection vulnerability via the /server/cgi-bin/testserv.cgi component.
CVE-2022-37053Critical· 9.8TRENDnet TEW733GR v1.03B01 is vulnerable to Command injection via /htdocs/upnpinc/gena.php.
TRENDnet TEW733GR v1.03B01 is vulnerable to Command injection via /htdocs/upnpinc/gena.php.
CVE-2022-35203High· 7.2An access control issue in TrendNet TV-IP572PI v1.0 allows unauthenticated attackers to access sensitive system information.
An access control issue in TrendNet TV-IP572PI v1.0 allows unauthenticated attackers to access sensitive system information.
CVE-2021-31655Medium· 6.1Cross Site Scripting (XSS) vulnerability in TRENDnet TV-IP110WN V1.2.2.64 V1.2.2.65 V1.2.2.68 via the profile parameter
Cross Site Scripting (XSS) vulnerability in TRENDnet TV-IP110WN V1.2.2.64 V1.2.2.65 V1.2.2.68 via the profile parameter. in a GET request in view.cgi.